Egypt: Personal Data Protection Law (No. 151 of 2020) including cybersecurity regulation entered into force

On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law mandates that data controllers and processors notify the Personal Data Protection Centre (PDPC) within 72 hours of discovering a breach. The notification must detail the breach, affected data types, and mitigation measures. Affected individuals must be informed within three business days. Entities must document their breach notification processes and maintain records of all data breaches.