Egypt has issued the Executive Regulations to its Personal Data Protection Law No. 151 of 2020, providing the detail needed for the law to be enforced after a transition period.
Key points
- Licences or permits are required for controllers and processors.
- Breaches must be notified within 72 hours.
- A DPO is required.
- A one-year transition applies.
- Breaches must also be notified to data subjects within 3 working days, and criminal penalties apply.
UK organisations processing personal data of Egyptian citizens or residents should prepare for licensing, DPO appointment and breach notification before full enforcement.
Source: CMS: Egypt’s PDPL Executive Regulations issued
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
