Egypt Personal Data Protection Law, Sensitive Personal Data and a child's data

Law No. 151 of 2020, Article 12 (Sensitive Personal Data and a child's data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 16 October 2020.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

Obtain a Personal Data Protection Center license before collecting, storing, transferring, or processing any Sensitive Personal Data, including a biometric, health, genetic, financial, religious, political, or criminal-record identifier, or any data relating to a child.
Obtain a parent or legal guardian's consent before processing a child's personal data, and do not condition a child's participation in a game, competition, or activity on personal data beyond what participation requires.
Obtain the Data Subject's explicit written consent before any dealing with their Sensitive Personal Data, outside the cases a law authorises, on top of the Center's licence.
Treat any data relating to a child as Sensitive Personal Data in every case, whatever its subject matter.

What it reaches

Obligation class

Prohibition, Licensing, Consent, Biometric, Age verification

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 12 prohibits a Controller or Processor, natural or juristic, from collecting, transferring, storing, saving, processing or disclosing Sensitive Personal Data except under a licence issued by the Personal Data Protection Center. Outside the cases a law authorises, the Controller or Processor must also obtain the Data Subject's explicit written consent.

Where any of those activities concerns a child's data, the legal guardian's consent must be obtained instead, and a child's participation in a game, competition or any other activity may not be made conditional on submitting more of the child's Personal Data than participation needs.

Article 1 defines Sensitive Personal Data as data revealing psychological, mental, physical or genetic health, biometric data, financial data, religious beliefs, political opinions or criminal record, and makes any data relating to a child sensitive in every case.

Article 7 of the promulgating law brings the annexed Personal Data Protection Law into force three months after the day following its publication in the Official Gazette, and the law was issued at the Presidency on 13 July 2020, so these provisions have bound since 16 October 2020.

When LexLint raises it

crawls_web
trains_models
processes_biometrics
processes_voice
serves_minors
handles_health_records
provides_financial_services

Read the law

Personal Data Protection Law, English translation as republished by the ILO's NATLEX legislative database

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app