This issue is filled with great insights and expert commentary on areas that are relevant to the legal landscape and highlight how the business community is embracing technology, media and telecommunications. There are various topics covered, from new ways of working and digital transformation in the finance sector to data protection regulatory updates and guidance. We also have a series of articles that focus on e-commerce across a number of jurisdictions.
You will also find insights from our lawyers around real estate analytics, tech trends, and data centres.
We hope this edition of Law Update provides some useful food for thought – enjoy the read!Take a read of the edition
Egypt’s Personal Data Protection Law was passed on 13 July 2020 and published on 15 July 2020. It will come into force on 14 October 2020, and the Executive Regulations are expected by 14 April 2021.
The Personal Data Protection Law introduces a variety of compliance requirements, as well as some significant criminal penalties.
The Personal Data Protection Law defines “Personal Data” as any data related to an identified natural person, or to a natural person identifiable, directly or indirectly, by reference to any other data, such as name, voice, picture, identification number, online identifier, or any data that identifies psychological, health, economic, cultural or social identity. “Sensitive Personal Data” is defined as Personal Data that discloses psychological, mental, physical or genetic health, biometric data, financial data, religious beliefs, political opinions or security situation; and Personal Data relating to children is deemed to be Sensitive Personal Data.
The Personal Data Protection Law prohibits the processing of personal data except with the consent of the data subject, or where otherwise permitted by law.
Data subjects have various rights under the Personal Data Protection Law. These include:
The Personal Data Protection Law contemplates that entities processing personal data will be required to appoint a Data Protection Officer. Further details as to this requirement can be expected in the Executive Regulations.
Subject to certain exceptions, the Personal Data Protection Law contains a general prohibition on the transfer of personal data to recipients located outside Egypt except with the permission of the (yet to be established) Egyptian Data Protection Centre and where the level of protection provided is not less than that provided in Egypt pursuant to the Personal Data Protection Law. The Executive Regulations will specify the policies, standards, guidelines, and rules necessary for transferring personal data across borders.
The Personal Data Protection Law provides specific requirements applicable to digital marketing.
The Personal Data Protection Law provides for a variety of criminal offences, with a range of penalties – including fines and imprisonment. These include:
Corporate clients processing personal data in Egypt, or outside Egypt in respect of individuals in Egypt, should familiarise themselves with the requirements and ensure compliance as soon as possible.