Página traducida y verificada automáticamente. Prevalece la versión en inglés. Algunas partes siguen en inglés mientras se verifica su traducción. Ver en inglés · Informar un error de traducción
Regulaciones › Resto del mundo › Egipto
PDPL (Egipto)
Ley de Protección de Datos Personales, Ley n.º 151 de 2020 (Egipto)
CuándoEn vigor desde 2020; Reglamento Ejecutivo emitido en 2025
Quién la aplicaCentro de Protección de Datos Personales (PDPC)
A quién se aplicaResponsables y encargados que tratan datos personales de personas en Egipto.
Informar al reguladorNotificar al Centro en un plazo de 72 horas desde que se tenga conocimiento
DPO obligatorioTodo responsable y encargado que sea persona jurídica debe designar a un empleado cualificado como DPO y regis…
RegistroLos responsables y encargados necesitan licencias del Centro con tasas de hasta EGP 2 millones, además de permi…
Transferencias al extranjeroLas transferencias al extranjero requieren una protección equivalente en el destino y una licencia o permiso de…
Plazo de solicitudesSeis días hábiles para responder
Multa máximaMultas de hasta EGP 5 millones (unos USD 100,000) por infracción, duplicadas en caso de reincidencia
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Alcance y base jurídica
Alcance extraterritorial
3
Covers Egyptians anywhere, non-Egyptians in Egypt, and non-Egyptians abroad where the data concerns Egyptians or residents and the act is also criminal there.Issuance Art. 2 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Base jurídica
3
Explicit consent is the default; other grounds are contract, legal obligation and exercising legal rights. No legitimate interests ground.Arts. 2, 6 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Consentimiento
2
Explicit consent for specific purposes is required; sensitive and children's data need written explicit consent.Arts. 2, 6, 12 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. Executive Regulations may prescribe consent mechanics.
Datos sensibles
3
Processing sensitive data requires both written explicit consent and a licence from the Personal Data Protection Center.Art. 12 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Niños
3
Children's data is sensitive. Under 15 needs written guardian consent; for ages 15 to 18 the Center sets the consent mechanism.Art. 1; Exec. Regs Art. 15 (Decision 816/2025) · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. Regulation article per translation; not confirmed against the Gazette.
Derechos de las personas
Derechos
2
Know and access data, withdraw consent, correct and erase, restrict processing, object, and be told of breaches.Art. 2 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. No portability or automated decision right.
Plazo de solicitudes
3
Six working days to respond; silence is treated as refusal.Art. 32 (per translation); Art. 10 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. Article number for the six-day period unconfirmed.
Marketing
2
Electronic direct marketing requires prior consent, a clear opt-out and a Center licence; consent records kept three years.Arts. 17-18; Exec. Regs Art. 18 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Gobernanza
DPO obligatorio
3
Every legal-entity controller and processor must appoint a qualified employee as DPO and register them with the Center.Art. 8 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Requisitos del DPO
3
DPOs must be registered with the Center, reportedly after credentials checks, a clean record and a Center-approved exam.Art. 8; Executive Regulations (Decision 816/2025) · secondary source · source ↗
Exam and category rules from secondary summaries; regulation articles not verified.
Registro
3
Controllers and processors need Center licences with fees capped at EGP 2 million, plus permits for transfers, marketing and CCTV.Arts. 26-27; Executive Regulations · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. Validity and tiered fees from secondary sources.
DPIA
1
No express DPIA in the Law; the DPO must run periodic assessments and audits of data protection systems.Art. 9 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. Executive Regulations DPIA provisions not confirmed.
Registros
2
Controllers must keep a dedicated record of processing, and processors a record of processing activities.Arts. 4, 5 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Conservación
2
Data may not be kept longer than the purpose requires and must be erased when the purpose ends.Arts. 3, 4 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Violaciones de datos
Informar al regulador
2
Notify the Center within 72 hours of becoming aware; national-security breaches immediately.Art. 7 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Informar a las personas
3
Notify affected data subjects within three working days after notifying the Center.Art. 7 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Transferencias
Transferencias al extranjero
3
Transfers abroad need equivalent protection in the destination and a licence or permit from the Center, unless a listed exception applies.Arts. 14-15 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Localización
0
No general in-country storage mandate.Art. 14 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Aplicación de la ley
Multa máxima
2
Fines up to EGP 5 million (about USD 100,000) per offense, doubled for repeat offenses.Arts. 41, 42, 45, 48 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached. USD value near the scale boundary.
Responsabilidad penal
3
Many violations carry imprisonment (at least 3 to 6 months); managers who knew of a violation face the same penalties.Arts. 36, 41-42, 47 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Acción privada
2
Victims keep the right to claim compensation; entities are jointly liable for employees' violations.Arts. 35, 47 · secondary source · source ↗
Unofficial English translation (Andersen); official Arabic text not reached.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulaciones
Todas las leyes estatales de privacidad de EE. UU., en un mapa
24 estados tienen una ley integral de privacidad en la biblioteca, junto con las leyes de la UE, del Reino Unido, federales de EE. UU. y globales: 102 en total, cada una explicada en palabras sencillas con sus fuentes. Seleccione un estado para ver qué se aplica allí.
- En vigor
- Entrada en vigor
- Leyes sectoriales