Fixed Solutions Group · Compliance Advisory
EGYPT PDPL COMPLIANCE (LAW 151/2020)

Personal Data Protection Executive Readiness Check

Assess your organisation's legal compliance against Law No. 151 of 2020 and its Executive Regulations. Identify critical vulnerabilities, potential criminal liabilities, and اfinancial fines in under 3 minutes.

Ends 31 Oct 2026Compliance adjustment period (Law Art. 6)
EGP 5,000,000Maximum criminal fines according to the law or the type of violation
May Include Custodial ProvisionsImprisonment penalties may apply to the responsible manager and Data Protection Officer, with imprisonment of up to 3 years

What has changed and why does it matter now?

Egypt's Personal Data Protection Law has existed since 2020, but it had no real enforcement teeth until its Executive Regulations were issued under Minister of Communications and Information Technology Decree No. 816 of 2025, taking effect 2 November 2025. These regulations turn the law into an active licensing and enforcement regime, run by the new Personal Data Protection Center (PDPC).

Organisations were given a one-year grace period from the Executive Regulations' issuance to come into compliance (Law Article 6) — it ends 31 October 2026. The PDPC already has statutory authority to license, inspect, and investigate (Law Article 19, 21). The law applies to any organisation processing the personal data of individuals in Egypt, including foreign companies with no local office (Law Article 2).

📅 Grace period ends 31 Oct 2026 🏛️ Enforced by the PDPC 🌍 Applies to foreign companies too

What non-compliance actually costs

Law 151/2020's Chapter 14 (Articles 35–49) sets out financial and criminal penalties per violation type:

EGP 100,000 – 5,000,000Fines, by article and severity (Arts. 36–46)
Imprisonment of up to 3 yearsSensitive-data, cross-border, or obstruction violations (Arts. 41, 42, 46)
Personal liabilityExtends to de facto managers/corporate leaders who knew (Art. 47)

Figures reflect Law 151/2020's published financial and criminal penalty ranges by article; specific amounts depend on the violation and are ultimately at the PDPC's/courts' determination. This is general information, not legal advice.

Take the 3-minute check

Answer 10 short questions covering the core obligations most businesses miss first — appointing a DPO, lawful consent, marketing communications, data subject rights, breach response, cross-border transfers, and vendor contracts. You'll get a directional risk read, an estimated اfinancial fines, and a clear next step.

Question 1 of 10

Your Egypt PDPL Quick Check Results

0%

PDPL Readiness Index

EGP 0
Estimated اfinancial fines — range of potential fines under Law 151/2020 for identified compliance gaps
Standard LiabilityExecutive Personal Liability

Where the gaps are

Recommended next steps

Step 1 — Go deeper

Full Egypt PDPL Assessment

This quick check covers 10 questions. Our full self-assessment platform covers Law 151/2020 in complete depth as its core scope — with GDPR, Saudi and UAE PDPL, the EU AI Act, HIPAA, and ISO/NIST standards available as optional additional frameworks if relevant to your business — across 26+ compliance domains, with a detailed gap report and prioritised action plan.

Step 2 — Operationalise

Data Governance Platform

A self-assessment tells you what's missing. This platform helps you actually run compliance day to day: a live Record of Processing Activities (ROPA), a structured Data Protection Impact Assessment (DPIA) workflow for high-risk processing, and a Data Subject Access Request (DSAR) intake and fulfilment process — the three things regulators ask for first.

Talk to a Compliance Specialist