Duty LXD-6235
Serves under-18s, in Egypt
Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes, System-Security Duty on a System Managersince 4 lines
Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes, Arts. 29, 42, 44 · Read the law's page
- This binds any person responsible for managing a website, private account, email account, or information system in Egypt, whether or not any personal data is involved.
- Do not intentionally expose a website, private account, email account, or information system you manage to the commission of a crime under this Law; doing so carries imprisonment of not less than one year, a fine of EGP 20,000 to 200,000, or both.
- Take the security precautions and measures the executive regulations of this Law prescribe. A negligent failure to do so that results in your website, private account, email account, or information system being exposed to a crime under this Law carries imprisonment of not less than six months, a fine of EGP 10,000 to 100,000, or both.
- No reachable source confirms whether the Prime Minister has issued the Executive Regulations Article 44 requires, or what specific security precautions and measures they define; WIPO Lex's own record of this Law lists no related implementing text, so treat the 'security precautions and measures' standard as unconfirmed rather than absent.
Law No. 175 of 2018, Service Providers' Duty to Secure Data and Informationsince 2 lines
Law No. 175 of 2018, Art. 2 (First) (service providers' duty to secure data) · Read the law's page
- This binds a service provider, any natural or legal person who provides information and communication technology services to users, including one who processes or stores information directly or on behalf of others (Article 1; reached by declaring any activity that provides such a service to users).
- Secure the data and information you handle to ensure its confidentiality, prevent unauthorized access, and protect against damage (Article 2, First).
Law No. 175 of 2018, Duty of a Legal Entity's Manager to Report a Crime Against Its Systemsince 2 lines
Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system) · Read the law's page
- This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
- Report the crime to the competent authorities upon becoming aware of it (Article 35).
Egypt Personal Data Protection Law, Sensitive Personal Data and a child's datasince 4 lines
Law No. 151 of 2020, Article 12 (Sensitive Personal Data and a child's data) · Read the law's page
- Obtain a Personal Data Protection Center license before collecting, storing, transferring, or processing any Sensitive Personal Data, including a biometric, health, genetic, financial, religious, political, or criminal-record identifier, or any data relating to a child.
- Obtain a parent or legal guardian's consent before processing a child's personal data, and do not condition a child's participation in a game, competition, or activity on personal data beyond what participation requires.
- Obtain the Data Subject's explicit written consent before any dealing with their Sensitive Personal Data, outside the cases a law authorises, on top of the Center's licence.
- Treat any data relating to a child as Sensitive Personal Data in every case, whatever its subject matter.