Egypt’s Personal Data Protection Law No. 151 of 2020 is becoming fully enforceable. The one-year grace period granted after the issuance of its Executive Regulations ends on 1 November 2026. Businesses that process personal data in Egypt, including foreign entities that handle the personal data of Egyptians, must regularize their status, and abide by the obligations set out therein. Key obligations include obtaining the required licenses, appointing and registering a data protection officer, keeping records of processing, and putting cross-border transfer arrangements in place. With no extension announced and penalties for non-compliance, early action is essential.

Our Cairo Team sets out what businesses need to do to comply and practical next steps, in the newsletter available here.