Places automated calls, in Egypt

Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes, Arts. 29, 42, 44 · Read the law's page

• This binds any person responsible for managing a website, private account, email account, or information system in Egypt, whether or not any personal data is involved.
• Do not intentionally expose a website, private account, email account, or information system you manage to the commission of a crime under this Law; doing so carries imprisonment of not less than one year, a fine of EGP 20,000 to 200,000, or both.
• Take the security precautions and measures the executive regulations of this Law prescribe. A negligent failure to do so that results in your website, private account, email account, or information system being exposed to a crime under this Law carries imprisonment of not less than six months, a fine of EGP 10,000 to 100,000, or both.
• No reachable source confirms whether the Prime Minister has issued the Executive Regulations Article 44 requires, or what specific security precautions and measures they define; WIPO Lex's own record of this Law lists no related implementing text, so treat the 'security precautions and measures' standard as unconfirmed rather than absent.

Law No. 175 of 2018, Art. 2 (First) (service providers' duty to secure data) · Read the law's page

• This binds a service provider, any natural or legal person who provides information and communication technology services to users, including one who processes or stores information directly or on behalf of others (Article 1; reached by declaring any activity that provides such a service to users).
• Secure the data and information you handle to ensure its confidentiality, prevent unauthorized access, and protect against damage (Article 2, First).

Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system) · Read the law's page

• This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
• Report the crime to the competent authorities upon becoming aware of it (Article 35).

Law No. 151 of 2020 Promulgating the Personal Data Protection Law, general duties (annexed arts. 1-6, 8-11, 13 and 17-18) · Read the law's page

• Obtain the data subject's explicit consent before processing their personal data unless another lawful ground applies, such as performing a contract, complying with a legal obligation, or acting under a judicial order.
• Collect Personal Data only for legitimate, specific purposes that are transparent to the Data Subject, keep it correct, valid and secured, and do not retain it longer than that purpose needs.
• Adopt technical and regulatory procedures and the necessary standard criteria to protect Personal Data and keep it confidential, preventing any hack, damage, alteration or manipulation.
• Delete Personal Data once the purpose it was collected for is satisfied, or hold it in a form that does not allow the Data Subject to be identified, and correct any error immediately on being told of it or becoming aware of it.
• Maintain a record of the Personal Data in your possession, describing its categories, the persons it may be disclosed to, and the basis, duration, restrictions and scope of that disclosure.
• Appoint a Data Protection Officer, have the officer registered in the Center's register, and let the officer carry out the duties articles 9 and 13 set.
• Mark any electronic communication sent for direct marketing as articles 17 and 18 require, identifying its sender and giving the recipient a way to refuse it.