PDPL EG
Personal Data Protection Law (Law 151 of 2020)
Egypt
Enacted 2020, pending executive regulations
Asia & Africa
Who must comply
Controllers and processors that handle personal data of Egyptians or residents of Egypt, including some processing carried out abroad.
Penalties
Fines up to EGP 5 million and possible imprisonment for serious violations such as unlawful processing of sensitive data.
Key obligations
- Obtain consent before collecting and processing unless exempt
- Provide notice of purpose to data subjects
- Obtain a license or permit from the center where required
- Honor access, correction, erasure and withdrawal rights
- Apply security measures and report breaches
How ConsentX helps
Consent capture before collection
Electronic-marketing opt-in controls
Withdrawal and rights request workflow
Consent receipts and evidence logs
Region rule engine tuned for Egypt
Get PDPL EG ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with PDPL EG using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under PDPL EG.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that PDPL EG requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a PDPL EG audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Egypt require consent to process personal data?+
Consent is generally required before collecting and processing personal data unless a legal exception applies.
Is Egypt's data protection law fully operational?+
The law was enacted in 2020, but full enforcement awaits the issuance of its executive regulations and the data protection center.