Is Egypt's data protection law fully operational?

The law was enacted in 2020, but full enforcement awaits the issuance of its executive regulations and the data protection center.

Egypt

PDPL EG

Q: Does Egypt require consent to process personal data?

Consent is generally required before collecting and processing personal data unless a legal exception applies.

Personal Data Protection Law (Law 151 of 2020)

Egypt's data protection law generally requires the data subject's consent before collecting and processing personal data unless an exception applies, with stricter conditions for sensitive data and electronic marketing.

Region

Egypt

Status

Enacted 2020, pending executive regulations

Group

Asia & Africa

Who must comply

Controllers and processors that handle personal data of Egyptians or residents of Egypt, including some processing carried out abroad.

Penalties

Fines up to EGP 5 million and possible imprisonment for serious violations such as unlawful processing of sensitive data.

Key obligations

Obtain consent before collecting and processing unless exempt
Provide notice of purpose to data subjects
Obtain a license or permit from the center where required
Honor access, correction, erasure and withdrawal rights
Apply security measures and report breaches

How ConsentX helps

Consent capture before collection

Electronic-marketing opt-in controls

Withdrawal and rights request workflow

Consent receipts and evidence logs

Region rule engine tuned for Egypt

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.

Get PDPL EG ready with ConsentX

Get started free Book a demo

How to comply with PDPL EG using ConsentX

1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under PDPL EG.
2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that PDPL EG requires, automatically.
3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a PDPL EG audit.
5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.