Egypt: Executive Regulations of the Personal Data Protection Law (Decision No. 816 of 2025) including cross-border data transfer regulation entered into force

On 2 November 2025, the Executive Regulations of the Personal Data Protection Law issued by Law No. 151 of 2020 entered into force on the day following their publication in the Official Gazette, as issued by Minister of Communications and Information Technology Decision No. 816 of 2025. The Executive Regulations establish cross-border data transfer regulation governing the transfer, storage, participation, and making available of personal data across borders. They require prior permission or authorisation from the Personal Data Protection Center (PDPC) based on an assessment of the level of personal data protection in the destination state and approval from the person concerned with the data. They require controllers and processors to apply legal and technical safeguards consistent with the nature and volume of transferred data. The Executive Regulations require updating permissions when adding destination states and establishing adequacy standards covering compatible legislation, safeguards, and compensation mechanisms. They permit making available personal data outside the Arab Republic of Egypt, subject to PDPC permission and safeguards not lower than domestic requirements.