Egypt

Privacy Notice Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Privacy Notice Guidelines (Version 1.1), providing interpretive and regulatory guidance on privacy notices within the scope of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Privacy Notice Guidelines clarify that a privacy notice is a transparency tool and does not constitute a consent request, and distinguish a privacy not...

Data Protection Principles Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Protection Principles Guidelines (Version 1.1). The Guidelines provide interpretive and regulatory guidance on the fundamental principles governing the processing of personal data under the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines set out nine principles, namely lawfulness, fairness, transparency, purpose ...

Data Users Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Users Guidelines. These Guidelines clarify the roles and responsibilities of data users under the Personal Data Protection Law. The Guidelines distinguish between controllers who determine the essential means of processing and processors who act on behalf of controllers. These Guidelines detail legal obligations such as the requirement to appoint a Data Protection Officer and obtain the necessary l...

Guidelines on Data Protection Officer Categories

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Guidelines on Data Protection Officer Categories. These Guidelines establish a professional hierarchy for Data Protection Officers (DPOs) in Egypt by categorising them into Category A (Lead DPO), Category B (Advanced DPO), or Category C (Entry-Level DPO). Category A applies to processing more than 2million records and requires three to five years of proven experience and an examination score of more than 80%. Category...

Data Protection Officer Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Protection Officer Guidelines. These Guidelines assist data users in complying with the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. Juridical persons acting as data users must appoint a Data Protection Officer (DPO) regardless of processing scale. Natural persons acting as data users may appoint a DPO or personally as...

✓ ✓ OfficialNational Strategy

Licences and Permits Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Licences and Permits Guidelines, Version 1.1, pursuant to Article 19 of the Personal Data Protection Law (PDPL) enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines set out the distinction between licences and permits for personal data processing, including definitions, eligibility, and validity periods. They establish categories of general and supple...

Record of Processing Activities Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) issued the Record of Processing Activities Guidelines Version 1.1, providing regulatory guidance on the documentation of personal data processing activities pursuant to the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines state that all data users must document processing activities in a Record of Processing Activities (RoPA) and distinguis...

National Strategypdpc.gov.eg ↗

Electronic Direct Marketing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Electronic Direct Marketing Guidelines (Version 1.1). The Guidelines clarify obligations under Chapter 8 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines apply to Electronic Direct Marketing Communications that are electronic and direct communications targeted at specific individuals to promote goods, services, ...

Lawful Bases of Processing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Lawful Bases of Processing Guidelines, Version 1.1, which outline the lawful bases for processing personal data under Article 6 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines clarify the lawfulness principle and describe how Data Users may identify and assess an appropriate lawful basis prior to initiating a p...

Data Subject Consent Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Subject Consent Guidelines, Version 1.1, setting out non-binding guidance on consent as a lawful basis for processing under Article 3 and Article 6 of the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines identify six lawful bases and explain that consent requires a clear affirmative action and must be assessed case by case...

14 JAN 2026 · Executive Order

National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies

In January 2026, the Cabinet approved expanding the mandate of the National Council for Artificial Intelligence (NCAI) to include quantum computing and emerging technologies. Following this decision, the body was renamed the National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies. The expansion reflects a broader remit for the council beyond its original focus on artificial intelligence.

National Strategyai.gov.eg ↗

16 NOV 2025 · National Strategy

Egypt has taken serious steps toward AI governance framework, says foreign minister

Primary source (egyptian-gazette.com) dated 16 November 2025 in EG. See linked source for full text.

National Strategyegyptian-gazette.com ↗

22 OCT 2025 · International Agreement

EU and Egypt release joint statement on digital connectivity and data governance, covering AI

We, the leaders of the European Union and the Arab Republic of Egypt (hereinafter Egypt), held our first EU-Egypt Summit in Brussels, Belgium on 22 October 2025 and concluded the following:\n\nToday\'s S

✓ ✓ OfficialCybersecurity ·Data Privacy & Protectionec.europa.eu ↗

08 JUL 2025 · Executive Order

National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services

On 7 August 2025, the National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services entered into force. The framework defines regulatory requirements for entities providing or using cybersecurity services. It specifies terms such as cybersecurity services, critical infrastructure, and service providers, and mandates adherence to technical and organisational standards. The framework establishes obligations for service providers, including complia...

✓ ✓ OfficialNational Strategytra.gov.eg ↗

29 APR 2025 · International Agreement

BRICS+ sign declaration on AI governance

Declaração da Presidência da Reunião de Ministros das Relações Exteriores/Relações Internacionais dos Países Membros do BRICS [*]

✓ ✓ OfficialData Privacy & Protection ·Generative AIgov.br ↗

11 FEB 2025 · Executive Order

Operational license requirement in Executive Regulations of the Personal Data Protection Law (Ministerial Decision No. 816 of 2025)

On 2 November 2025, the Executive Regulations of the Personal Data Protection Law issued by Law No. 151 of 2020 entered into force on the day following their publication in the Official Gazette, as issued by Minister of Communications and Information Technology Decision No. 816 of 2025. The Executive Regulations establish a framework for the classification, authorisation, licensing, registration, and accreditation of data controllers, personal data processors, platforms, and related activitie...

✓ ✓ OfficialNational Strategydrive.google.com ↗

09 JAN 2025 · Other

Governing AI with inclusion: An Egyptian model for the Global South

Egypt has accelerated its commitment to AI as a pillar of its vision for sustainable development.

✓ ✓ OfficialNational Strategy

18 DEC 2024 · Other

Egypt preparing laws to regulate AI, data exchange and classification

Primary source (english.ahram.org.eg) dated 18 December 2024 in EG. See linked source for full text.

Data Privacy & Protection ·Generative AIenglish.ahram.org.eg ↗

12 SEP 2024 · Other

National Council's second version of National Artificial Intelligence Strategy

On 9 December 2024, the Minister of Communications and Information Technology announced the launch date of the second version of the National Artificial Intelligence Strategy, set for early 2025. The revised strategy aims to further integrate AI across various sectors, tackle societal challenges, broaden training programs for specialized talent, and improve computational infrastructure for government and private entities, including startups and small and medium-sized enterprises (SMEs).

National Strategysis.gov.eg ↗

22 AUG 2024 · Executive Order

Data localisation requirement in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including data localisation requirements entered into force. The policy mandates the localisation of data classified as "top secret" or "secret," requiring that such data be hosted exclusively within Egypt. This provision applies to data related to national security or sensitive operations and aims to ensure maximum protection against unauthorised access, breaches, or manipulation. The policy specifies that ...

22 AUG 2024 · Executive Order

Cybersecurity requirements in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including cybersecurity requirements entered into force. The policy mandates that cloud service providers (CSPs) must establish necessary technical and organisational procedures to manage security risks through the adoption of security standards certificates issued by the Egyptian Supreme Cybersecurity Council (ESCC). The policy also requires the development of encryption foundations, including full control ...

22 JUN 2023 · Executive Order

Minister of Finance Decree no. 160 including VAT guidelines for digital services and other remote services provided by non-residents

On 22 June 2023, the Minister of Finance's Decree no. 160 of 2023 issuing the value-added tax (VAT) guidelines for digital services and other remote services provided by non-residents entered into force. The guidelines require non-resident service providers and electronic distribution platform (EDP) operators offering remote services to Egyptian customers to register and remit VAT, with a standard rate of 14% and 10% for professional and consultancy services. Business-to-business (B2B) trans...

✓ ✓ OfficialNational Strategyeta.gov.eg ↗

22 MAY 2023 · Other

Parliament to issue document evaluating AI ethics and controls in Egypt

The Education Committee of the Egyptian Senate agreed on the need to issue a document evaluating the ethics and control of Artificial Intelligence (AI) in Egypt .

Educationegyptindependent.com ↗

19 APR 2023 · Other

Charter for Responsible Artificial Intelligence

On 19 April 2023, the National Council for Artificial Intelligence (AI) adopted the Egyptian Charter for Responsible AI, marking the first phase of its initiative to regulate AI systems within the country. The charter mandates that AI systems should not harm individuals, especially vulnerable groups, and should comply with Egyptian laws. It also stresses the importance of human oversight, risk management, and the involvement of qualified, diverse teams in AI development. Additionally, the cha...

✓ ✓ OfficialNational Strategyai.gov.eg ↗

25 JAN 2023 · Other

Egypt-India Memorandums of Understanding on ICT and cybersecurity cooperation

On 25 January 2023, the Egyptian President and Indian Prime Minister signed several Memorandums of Understanding (MoUs). The MoUs, which include agreements in the areas of Information and Communication Technology (ICT), cybersecurity, were signed during the Egyptian President's three-day visit to India. The MoUs aim to enhance cooperation in these sectors, focusing on knowledge exchange and sharing best practices.

✓ ✓ OfficialNational Strategyegcert.eg ↗

23 JAN 2023 · Other

Egypt-Palestine Memorandum of Understanding on ICT cooperation

On 23 January 2023, the Egyptian Minister of Communication and Information Technology and the Palestinian Minister of Communications and Information Technology signed a Memorandum of Understanding (MoU) to promote cooperation in Information and Communications Technology (ICT). The MoU covers technical cooperation in policy formulation and implementation. It also aims to establish cooperation mechanisms, share expertise, and adopt best practices to improve operational efficiency.

✓ ✓ OfficialNational Strategyegcert.eg ↗

26 SEP 2022 · Other

NCCM/EG-CERT review and amendment of Egypt's Child Online Protection Strategy

On 26 September 2022, the Egyptian National Computer Emergency Readiness Team (EG-CERT), in cooperation with the National Council for Childhood and Motherhood (NCCM), launched an initiative to review and amend Egypt’s Child Online Protection Strategy. A committee, composed of representatives from the concerned authorities in the country, has been formed to develop a national strategy aimed at addressing the evolving online risks to children and improving the effectiveness of protection measur...

Content Moderationegcert.eg ↗

26 MAY 2021 · Other

Egypt’s AI strategy is more about development than AI

Egypt is striving to exploit AI technologies to serve its development goals and foster regional co-operation on AI.

✓ ✓ OfficialNational Strategy

21 JAN 2021 · Other

EG-CERT advisory on potential cyber threats

On 21 January 2021, the Egyptian National Computer Emergency Readiness Team (EG-CERT) issued an advisory on potential cyber threats. The advisory includes a set of actions and measures that institutions must take to protect their assets and networks from cyber threats. The advisory highlights the risks to digital infrastructure and the potential impact on public safety from cyber incidents, including ransomware attacks and website defacement. It outlines key measures such as multi-factor auth...

✓ ✓ OfficialNational Strategyegcert.eg ↗

17 OCT 2020 · Law / Act

Operational license requirement in Personal Data Protection Law (No. 151 of 2020)

On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law mandated that entities processing personal data obtain an operational licence from the Personal Data Protection Center (PDPC). This licence is necessary for collecting, storing, or processing personal data and specifies permitted activities and validity duration. The law outlines procedures for licence application and renewal, as well as penalties for operating without a valid licence, which may inc...

17 OCT 2020 · Law / Act

Measures establishing Personal Data Protection Center in Personal Data Protection Law (No. 151 of 2020)

On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law establishes the Personal Data Protection Center (PDPC) as the national authority overseeing data protection. The PDPC is responsible for developing policies, standards, and guidelines to protect personal data. Its governance includes a board of directors with representatives from key ministries and agencies. The PDPC issues licences, conducts inspections, and enforces compliance through legal action...

28 AUG 2020 · Executive Order

Cybersecurity regulation in Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020)

On 28 August 2020, Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020) entered into force. The Executive Regulation outlines cybersecurity measures to safeguard data and digital infrastructures against threats. It mandates the use of encryption standards, such as Advanced Encryption Standard (AES) with a minimum key length of 128 bits for general systems and 256 bits for critical infrastructure. Additionally, ...

✓ ✓ OfficialNational Strategytra.gov.eg ↗

18 AUG 2020 · Law / Act

Content moderation regulation in Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation

On 18 August 2020, Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (SCMR) entered into force. Entities, institutions, press, media outlets, and websites were required to comply with the provisions of the law and its executive regulation within six months of the enforcement of the executive regulation. The law prohibits media outlets and electronic platforms from publishing or broadcasting content that incites violence, hatred, or discrimination, or that viola...

✓ ✓ OfficialContent Moderationwipolex-resources-eu-central-1-358922420655.s3.amazonaws.com ↗

17 FEB 2020 · Executive Order

Content moderation regulation in Executive Regulation for Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (Prime Minister's Decree No. 418 of 2020)

On 17 February 2020, the Executive Regulations for Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (SCMR) (Prime Minister's Decree No. 418 of 2020) entered into force. The regulation mandates that media outlets, including newspapers and electronic media, must operate within the framework set by the SCMR. This includes requirements for notifying the SCMR of changes in ownership, management, or operational details, as well as adhering to specific guidelines for...

✓ ✓ OfficialContent Moderationwipolex-resources-eu-central-1-358922420655.s3.amazonaws.com ↗

National Strategy

Egypt National Artificial Intelligence Strategy (First Edition)

AI law in Egypt: Egypt's first National AI Strategy launched in 2021 aims to position the country as a regional AI leader by focusing on capacity building, government digitization, sectoral AI applications, and international cooperation. The strategy establishes the National Council for AI under MCIT to oversee implementation....