Runs an essential service, in Egypt

Law No. 175 of 2018, Art. 2 (First) (service providers' duty to secure data) · Read the law's page

• This binds a service provider, any natural or legal person who provides information and communication technology services to users, including one who processes or stores information directly or on behalf of others (Article 1; reached by declaring any activity that provides such a service to users).
• Secure the data and information you handle to ensure its confidentiality, prevent unauthorized access, and protect against damage (Article 2, First).

Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system) · Read the law's page

• This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
• Report the crime to the competent authorities upon becoming aware of it (Article 35).

Law No. 151 of 2020, Article 7 (Personal Data Infringement notification) · Read the law's page

• Notify the Personal Data Protection Center of any personal data breach within 72 hours of the breach, and notify immediately where the breach relates to national security protection concerns.
• Notify the Data Subject within 3 days of the date you notified the Center, telling them of the infringement and the procedures you have adopted about it.
• Be ready to give the Center a description of the infringement's nature, form and reasons and the approximate number of Personal Data and records affected, the Data Protection Officer's information, the potential consequences, the procedures followed and proposed to minimise the impact, and evidence documenting the infringement and the corrective actions taken.