What are the penalties under Egypt's data protection law?
Criminal ones, imposed by the Economic Courts rather than the regulator. Processing personal data without consent carries EGP 100,000 to EGP 1,000,000 (Art. 36). Sensitive-data and transfer offences carry at least three months' imprisonment, EGP 500,000 to EGP 5,000,000, or both. Penalties double for a repeat offence.
Operating without the licence the law requires is a separate offence, at EGP 500,000 to EGP 5,000,000 (Art. 45), and the person actually managing the business is liable if they knew of the violation (Art. 48).
Before any court case, the Personal Data Protection Center's own powers apply: a warning, then suspending or withdrawing a licence, publishing the violation or placing the business under technical supervision (Art. 30).
Reviewed by Taha, our privacy expertLast reviewed
Read the full Egypt data protection law guide