Egypt

Data Protection Center to be established under the Ministry of Communications and IT.

Consent required as primary basis. Must be explicit for sensitive data and cross-border transfers.

Rights to access, rectification, erasure, restriction, and objection.

Requires DPC approval or adequate protection in recipient country.

Must notify DPC within 72 hours. Affected individuals must be notified if high risk.

DPO mandatory for controllers and processors above certain thresholds.

General provisions for sensitive data apply. No specific age threshold defined.

Fines from EGP 100K to EGP 5 million. Criminal penalties including imprisonment.

CBE financial data rules, health data regulations in development.

General consent requirements apply. No specific cookie regulation.

No specific provisions on automated decisions.

Certain categories of data may require local storage per sector regulations.

No equivalent concept.

Law applies to government processing with national security exemptions.