Egypt Privacy Law Update: Is Your Privacy Policy Compliant?

Egypt has now issued the Executive Regulations of the Personal Data Protection Law No. 151 of 2020 under Ministerial Decree No. 816 of 2025.

For businesses, this is not just a legal update. It is a practical compliance question:

Is your privacy policy actually up to date?

Companies collecting or processing personal data in Egypt should review whether their privacy notices, consent forms, websites, apps, customer records, employee files, and data-sharing arrangements comply with the new requirements.

At minimum, businesses should check whether they clearly address:

1. what personal data is collected;
2. why the data is collected and processed;
3. how consent is obtained and documented;
4. how long the data is retained;
5. how data subjects can access, correct, restrict, withdraw consent, or object to processing;
6. what security measures are used to protect the data;
7. whether data is shared with processors, service providers, or affiliates;
8. whether data is transferred outside Egypt;
9. whether a licence, permit, Data Protection Officer, or local representative is required; and
10. how the company will respond to a data breach or regulatory inspection.

A generic privacy policy copied from another jurisdiction will no longer be enough. The Executive Regulations require businesses to align their actual data practices with documented policies, internal records, consent mechanisms, and technical safeguards.

For companies operating in technology, healthcare, logistics, e-commerce, financial services, outsourcing, HR, and customer-facing services, now is the time to conduct a privacy compliance review.

MEASA assists businesses with regulatory compliance, privacy policy reviews, market entry, and data protection readiness in Egypt.