EgyptEgypt Personal Data Protection Law, cross-border transfer of Personal Data
Law No. 151 of 2020, Articles 14-16 (cross-border transfer of Personal Data)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 16 October 2020.
A cross border transfer rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Obtain a Center license or permit before transferring, storing, or sharing personal data outside Egypt, unless the destination country's protection level meets or exceeds Egypt's own, or the data subject has given explicit consent.
- Where you rely on the Data Subject's explicit consent instead of the minimum protection level, use only one of the seven cases article 15 lists.
- Before disclosing Personal Data to a Controller or Processor abroad, hold a Licence from the Center and satisfy yourself that your work or purpose corresponds, that there is a legitimate interest in the data, and that the legal and technical protection there is not below Egypt's own.
What it reaches
Obligation class
Transfer, Licensing
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 14 permits the transfer of Personal Data collected or prepared for processing to a foreign country, or its storage or sharing there, only where the level of data protection or security in that country meets or exceeds this Law's requirements and a relevant Licence or Permit is obtained from the Center.
Article 15 lets a transfer, sharing, circulation or processing proceed without that minimum protection level where the Data Subject or their representative has given explicit consent and the case is one of seven the article lists: preserving the Data Subject's life and providing medical care, treatment or health-service management; proving, exercising or defending a right before the judiciary; concluding or executing an agreement between the Processor and a third party for the Data Subject's benefit; international judicial cooperation; legal necessity or an obligation to protect the public interest; transferring money to another country under that country's laws; and a bilateral or multilateral international agreement Egypt is party to.
Article 16 lets a Controller or Processor disclose Personal Data to another Controller or Processor outside Egypt under a Licence from the Center, provided their work or purpose corresponds, each of them or the Data Subject has a legitimate interest in the data, and the legal and technical protection abroad is not below Egypt's own.
Article 7 of the promulgating law brings the annexed Personal Data Protection Law into force three months after the day following its publication in the Official Gazette, and the law was issued at the Presidency on 13 July 2020, so these provisions have bound since 16 October 2020.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotprocesses_biometrics
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.