Comprehensive regime
Law No. 151 of 2020 Promulgating the Personal Data Protection Law
Law No. 151 of 2020 Promulgating the Personal Data Protection LawPersonal Data Protection Law, English translation as republished by the ILO's NATLEX legislative database
In force since 16 October 2020. Binds public and private bodies.
What this law does
Egypt's comprehensive personal-data statute. It requires a lawful basis (ordinarily the data subject's consent) for processing, imposes a licensing regime for Sensitive Personal Data (including biometric identifiers and any data relating to a child, which is always sensitive), prohibits cross-border transfer absent equivalent protection and a Center license, and requires notifying the Personal Data Protection Center of a breach within 72 hours.
Enforcement is criminal: unauthorized processing of ordinary Personal Data carries a fine of EGP 100,000 to 1,000,000, rising to imprisonment plus a fine of EGP 200,000 to 2,000,000 where done for gain or to endanger the data subject, and unauthorized processing of Sensitive Personal Data carries imprisonment plus a fine of EGP 500,000 to 5,000,000.
The Law's own Executive Regulations, needed to operationalize its licensing and consent rules, were not issued until Ministerial Decree No. 816 of 2025, more than five years after the Law itself took effect.
What it requires