Egypt PDPL
In force Egypt · In force Oct 16, 2020 · next deadline Nov 2, 2026 (in 37 days)
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Egypt's data protection law covers personal data processed electronically. It sets consent and lawful processing rules, strict rules for sensitive data and cross-border transfers, and a licensing and permit system run by the Personal Data Protection Center. The Executive Regulations were only issued in November 2025, which starts a one-year window to comply.
- Who it applies to
- Holders, controllers and processors of personal data processed electronically in Egypt, and offences by Egyptians abroad or by foreigners where the data concerns Egyptians or residents. Central Bank regulated entities are largely excluded.
- Penalties
- Criminal fines from EGP 100,000 up to EGP 5 million. Unlawful processing of sensitive data and breaches of cross-border rules carry at least three months in prison and fines of EGP 500,000 to 5 million (Arts. 41 and 42). Licensing breaches carry EGP 500,000 to 5 million (Art. 45).
- Enforced by
- Personal Data Protection Center (PDPC)
- Official name
- Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations
- Citation
- Law No. 151 of 2020; Minister of Communications and IT Decree No. 816 of 2025
- Topics
- privacy, data-residency, breach-notification
Research notes
Both official PDFs are scanned Gazette copies hosted by the PDPC and were read page by page.
Related
Questions about Egypt PDPL
- What are the Egypt PDPL compliance deadlines?
- Oct 16, 2020: PDPL takes effect (tentative). Nov 2, 2025: Executive Regulations take effect. Nov 2, 2026: One-year compliance window ends (tentative).
- When does Egypt PDPL take effect?
- Egypt PDPL took effect on Oct 16, 2020. The next milestone is Nov 2, 2026: One-year compliance window ends.
- Who does Egypt PDPL apply to?
- Holders, controllers and processors of personal data processed electronically in Egypt, and offences by Egyptians abroad or by foreigners where the data concerns Egyptians or residents. Central Bank regulated entities are largely excluded.
- What are the penalties under Egypt PDPL?
- Criminal fines from EGP 100,000 up to EGP 5 million. Unlawful processing of sensitive data and breaches of cross-border rules carry at least three months in prison and fines of EGP 500,000 to 5 million (Arts. 41 and 42). Licensing breaches carry EGP 500,000 to 5 million (Art. 45).