The Egyptian Parliament has adopted a new privacy protection
law. The new law will apply to companies established in Egypt and
to companies that are established outside of Egypt but that process
personal information of individuals in Egypt.
The law provides that the collection and processing of personal
information of individuals in Egypt are permitted only subject to
their consent and that data subjects shall have the right to
withdraw their consent at any time. Controllers and processors will
be required to take technical measures to secure personal data and
prevent disclosure of data to third parties unless permitted by
law. The law also restricts the transfer of personal data out of
Egypt and requires controllers and processors to obtain a license
from the Information Protection Center for such a transfer.
Additionally, processors are required to process the data only for
the purposes for which it was collected, for the minimum necessary
period according to the
