Egypt: Minister of Communications and Information Technology adopted Executive Regulations of the Personal Data Protection Law (Decision No. 816 of 2025) including cross-border data transfer regulation

On 1 November 2025, the Minister of Communications and Information Technology adopted the Executive Regulations of the Personal Data Protection Law issued by Law No. 151 of 2020 through Ministerial Decision No. 816 of 2025. The Executive Regulations establish cross-border data transfer regulation governing the transfer, storage, participation, and making available of personal data across borders. They require prior permission or authorisation from the Personal Data Protection Center (PDPC) based on an assessment of the level of personal data protection in the destination state and approval from the person concerned with the data. They require controllers and processors to apply legal and technical safeguards consistent with the nature and volume of transferred data. The Executive Regulations require updating permissions when adding destination states and establishing adequacy standards covering compatible legislation, safeguards, and compensation mechanisms. They permit making available personal data outside the Arab Republic of Egypt subject to PDPC permission and safeguards not lower than domestic requirements.