Privacy Notice Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Privacy Notice Guidelines (Version 1.1), providing interpretive and regulatory guidance on privacy notices within the scope of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Privacy Notice Guidelines clarify that a privacy notice is a transparency tool and does not constitute a consent request, and distinguish a privacy not...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Data Protection Principles Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Protection Principles Guidelines (Version 1.1). The Guidelines provide interpretive and regulatory guidance on the fundamental principles governing the processing of personal data under the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines set out nine principles, namely lawfulness, fairness, transparency, purpose ...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Data Users Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Users Guidelines. These Guidelines clarify the roles and responsibilities of data users under the Personal Data Protection Law. The Guidelines distinguish between controllers who determine the essential means of processing and processors who act on behalf of controllers. These Guidelines detail legal obligations such as the requirement to appoint a Data Protection Officer and obtain the necessary l...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Data Protection Officer Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Protection Officer Guidelines. These Guidelines assist data users in complying with the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. Juridical persons acting as data users must appoint a Data Protection Officer (DPO) regardless of processing scale. Natural persons acting as data users may appoint a DPO or personally as...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Record of Processing Activities Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) issued the Record of Processing Activities Guidelines Version 1.1, providing regulatory guidance on the documentation of personal data processing activities pursuant to the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines state that all data users must document processing activities in a Record of Processing Activities (RoPA) and distinguis...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Electronic Direct Marketing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Electronic Direct Marketing Guidelines (Version 1.1). The Guidelines clarify obligations under Chapter 8 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines apply to Electronic Direct Marketing Communications that are electronic and direct communications targeted at specific individuals to promote goods, services, ...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Lawful Bases of Processing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Lawful Bases of Processing Guidelines, Version 1.1, which outline the lawful bases for processing personal data under Article 6 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines clarify the lawfulness principle and describe how Data Users may identify and assess an appropriate lawful basis prior to initiating a p...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

26 JAN 2026 · Standard / Framework

Data Subject Consent Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Subject Consent Guidelines, Version 1.1, setting out non-binding guidance on consent as a lawful basis for processing under Article 3 and Article 6 of the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines identify six lawful bases and explain that consent requires a clear affirmative action and must be assessed case by case...

Official materialNational StrategyOfficial source · pdpc.gov.eg ↗

04 JAN 2026 · Other

Ministers launch new phase of cooperation on digital transformation and AI

Here is a professional English translation suitable for publication on the Ministry’s website: Prof. Dr. Abdelaziz Konsowa: We aim to provide AI...

Official materialEducation & TrainingOfficial source · mohesr.gov.eg ↗

22 OCT 2025 · International Agreement

EU and Egypt release joint statement on digital connectivity and data governance, covering AI

We, the leaders of the European Union and the Arab Republic of Egypt (hereinafter Egypt), held our first EU-Egypt Summit in Brussels, Belgium on 22 October 2025 and concluded the following:\n\nToday\'s S

Primary legal sourceCybersecurity ·Data Privacy & ProtectionOfficial source · ec.europa.eu ↗

07 AUG 2025 · Executive Order

National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services

On 7 August 2025, the National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services entered into force. The framework defines regulatory requirements for entities providing or using cybersecurity services. It specifies terms such as cybersecurity services, critical infrastructure, and service providers, and mandates adherence to technical and organisational standards. The framework establishes obligations for service providers, including complia...

Primary legal sourceNational StrategyOfficial source · tra.gov.eg ↗

29 APR 2025 · International Agreement

BRICS+ sign declaration on AI governance

Declaração da Presidência da Reunião de Ministros das Relações Exteriores/Relações Internacionais dos Países Membros do BRICS [*]

Primary legal sourceData Privacy & Protection ·Generative AIOfficial source · gov.br ↗

22 AUG 2024 · Executive Order

Data localisation requirement in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including data localisation requirements entered into force. The policy mandates the localisation of data classified as "top secret" or "secret," requiring that such data be hosted exclusively within Egypt. This provision applies to data related to national security or sensitive operations and aims to ensure maximum protection against unauthorised access, breaches, or manipulation. The policy specifies that ...

Primary legal sourceNational StrategyOfficial source · mcit.gov.eg ↗

22 AUG 2024 · Executive Order

Cybersecurity requirements in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including cybersecurity requirements entered into force. The policy mandates that cloud service providers (CSPs) must establish necessary technical and organisational procedures to manage security risks through the adoption of security standards certificates issued by the Egyptian Supreme Cybersecurity Council (ESCC). The policy also requires the development of encryption foundations, including full control ...

Primary legal sourceNational StrategyOfficial source · mcit.gov.eg ↗

National Strategy

Egypt National Artificial Intelligence Strategy (First Edition)

AI law in Egypt: Egypt's first National AI Strategy launched in 2021 aims to position the country as a regional AI leader by focusing on capacity building, government digitization, sectoral AI applications, and international cooperation. The strategy establishes the National Council for AI under MCIT to oversee implementation....

Official materialNational StrategyOfficial source · mcit.gov.eg ↗

National Strategy

National AI Strategy (2021)

The National Council for Artificial Intelligence (NCAI), established in 2019, serves as Egypt’s highest authority for AI policy direction and governance. Chaired by the ICT Minister, the Council brings together representatives from government, academia, and industry to ensure a coordinated and future-ready national approach. In January 2026, NCAI expanded its mandate and became the National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies, reflecting global technological advances and aligning with international standards. The Council is responsible for: - Issui

Official materialEnergy & EnvironmentOfficial source · mcit.gov.eg ↗