On 1 November 2025, the Minister of Communications and
Information Technology issued Ministerial Decree No. 816 of 2025
(the "Executive
Regulations"), promulgating the long-awaited
Executive Regulations of Egypt's Personal Data Protection Law
No. 151 of 2020; the Decree was published in the Official
Gazette and enters into force on the day following its
publication. The Regulations detail operational rules for consent,
licensing, record-keeping, breach notification, cross-border data
transfers, special categories of data, children's data, and
direct electronic marketing.
Key Highlights of the Executive Regulations
Consent, purpose limitation, retention, and records
The Executive Regulations require clear purpose specification,
prior informed consent from data subjects, purpose-aligned
collection and processing, defined and limited retention periods,
and confidentiality by design. Controllers must maintain a secure
electronic register covering consent records,
