Egypt PDPL (Law 151/2020)

Egypt Personal Data Protection Law - licensing, DPO, data subject rights, cross-border transfers.


Short name	EG PDPL
Region	Middle East & Africa
Country or scope	Egypt
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers EG PDPL

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below, plus 7 controls from Safeguard's control catalog for EG PDPL.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for EG PDPL and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`EG-PDPL-SEC` Security of Processing	Controllers and processors must apply technical and organizational measures securing personal data against breach, alteration or unlawful processing; verifiable integrity of the software inventory evidences such measures (Law 151/2020, security-of-processing obligations)	Scan
`EG-PDPL-DPO` Data Protection Officer	Entities processing personal data must appoint a data protection officer responsible for compliance, providing a reachable accountability contact for the systems described in the SBOM (Law 151/2020, DPO-appointment obligation)	Scan
`EG-PDPL-LIC` Licensing and Permits	Processing activities require licenses or permits from the Personal Data Protection Centre, which presupposes identified, dated documentation of the processing systems being licensed (Law 151/2020, licensing/permit provisions)	Scan
`EG-PDPL-PROC` Processor Obligations	Processors must process data only per the controller's instructions and maintain their own compliance, requiring the controller to know which suppliers stand behind the processing software (Law 151/2020, processor-obligations provision)	Scan
`EG-PDPL-BREACH` Breach Reporting Readiness	Breaches of personal data must be reported to the Centre and affected data subjects within short deadlines; rapid impact assessment requires known versions across the software estate (Law 151/2020, breach-notification obligation)	Scan
`EG-PDPL-XBORDER` Cross-Border Transfer Permits	Transfer of personal data outside Egypt requires a permit and an adequate level of protection; determining which systems transfer what requires precisely identifiable components (Law 151/2020, cross-border transfer provisions)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`EPDPL-ART2`	Core Data Processing Principles (Art. 2-7)
`EPDPL-ART14`	Data Subject Rights (Art. 14)
`EPDPL-ART28`	Data Protection Officer (Art. 28)
`EPDPL-ART31`	Data Breach Notification (Art. 31)
`EPDPL-ART39`	Cross-Border Data Transfers (Art. 39)
`EPDPL-SEC-1`	Technical and Organisational Security Measures
`EPDPL-PROC-1`	Processor Registration and Agreements

Policy templates

Written for EG PDPL:

Egypt PDPL: Privacy Notice
Egypt PDPL: Data Breach Notification Procedure
Egypt PDPL: Data Subject Rights Procedure

And 22 from the standard set, adapted to EG PDPL.