Egypt’s data protection executive regulations bring a practical question into focus: how does a business actually handle customer, employee and supplier data, and do its records reflect that practice?
Ministerial Decree No. 816 of 2025 issued the executive regulations under Personal Data Protection Law No. 151 of 2020. In its October 2026 update, Baker McKenzie identified 31 October 2026 as the end of the transition period for entities in scope. Egypt’s Personal Data Protection Center has issued guidance on matters including data protection officers and privacy notices.
A useful starting point is to map the data collected, who can access it and which providers process it. That map can inform reviews of privacy notices, supplier agreements and retention periods. It can also help identify where registration, licensing or permit requirements need to be assessed against the organisation’s role and activities.
Information update dated 12 November 2026. The applicable requirements depend on the organisation’s circumstances and current rules and guidance.
Sources
Egypt Personal Data Protection Center
Baker McKenzie, October 2026 update