Egypt. Comprehensive data protection. Ministerial Decree
Egypt PDPL Executive RegulationsExecutive Regulations of the Personal Data Protection Law (Ministerial Decree No. 816 of 2025)
In force
§1Summary
- Synopsis
Operationalises Law 151/2020: licensing procedures and fees, DPO qualification and registration, breach procedures, transfer permits and the adequacy framework.
- Key themes
- Unique features
Cloud hosting outside Egypt counts as a transfer needing a permit; DPOs require exams and a PDPC code; 90-working-day licence review.
- SaaS relevance
Offshore cloud SaaS processing Egyptian data needs transfer permits and licence updates when adding new hosting countries.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- PDPC 72h; individuals within 3 days thereafter
- DPO
- Yes
- Cross-border transfers
- Licence/permit; adequacy criteria to be published; TIAs
§3Dates
- Key dates
- Adopted
- In force
- Issued 1 Nov 2025; made public ~25 Dec 2025; one-year compliance window, enforcement expected ~1 Nov 2026
§4Text and authority
- Text
- No authoritative text located.
- Authority
- Personal Data Protection Centre (PDPC)
§5Where it applies
- Domestic law of
- Egypt
§6Sources and verification
- Sources consulted
- Verification
High confidence.
Uncertainty whether grace runs to Nov 2026 or end-2026. [Link: No online official text found; PDPC portal verified]