The framework
The operative statute in Egypt is the Personal Data Protection Law No. 151 of 2020, enforced by the Personal Data Protection Center.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Personal Data Protection Law No. 151 of 2020
Egypt's Law 151 of 2020 finally gained its Executive Regulation in November 2025 (Ministerial Decision No. 816 of 2025), starting a one-year grace period that ended on 31 October 2026. The Personal Data Protection Center licenses controllers and processors through an electronic portal and issues guidance, and direct electronic marketing needs both consent and a licence. Foreign companies need a local representative to apply. Enforcement can start now.
Marketing and advertising
Consent-first, with licences required under the Executive Regulation for processing, cross-border transfers, sensitive data and direct electronic marketing. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.
Cross-border transfers
Cross-border transfers need a licence from the Center and an adequate level of protection at the destination.
Enforcement and penalties
Fines up to EGP 5M plus imprisonment for certain violations; the Executive Regulation's one-year grace period ended on 31 October 2026, so penalties and licensing now apply.