The framework
Egypt has enacted the Personal Data Protection Law No. 151 of 2020, but the regime is not yet fully operative.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Personal Data Protection Law No. 151 of 2020
Egypt's Law 151 of 2020 finally gained its Executive Regulation in November 2025 (Ministerial Decision No. 816 of 2025), starting a one-year grace period that ends in early November 2026. The Personal Data Protection Center is licensing controllers and issuing guidance, and direct electronic marketing needs both consent and a licence. Build for enforcement from November.
Marketing and advertising
Consent-first, with licences required under the Executive Regulation for processing, cross-border transfers, sensitive data and direct electronic marketing. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.
Cross-border transfers
Cross-border transfers need a licence from the Center and an adequate level of protection at the destination.
Enforcement and penalties
Fines up to EGP 5M plus imprisonment for certain violations; the Executive Regulation's one-year grace period runs out in early November 2026.