Egypt PDPL readiness check

Egypt’s Personal Data Protection Law 151/2020 sat without executive regulations for five years. MCIT Ministerial Decree No. 816 of 2025, issued on 1 November 2025, changed that: controllers and processors now need PDPC licences on tiered fees, a qualified Data Protection Officer is mandatory for legal entities and registered with the Centre, breaches must reach the Personal Data Protection Centre within 72 hours, and cross-border transfers — offshore cloud included — need a permit. On the strict reading, enforcement is expected from 1 November 2026, one year after issuance. Twelve questions tell you whether you will be ready.