Is a listed company, in Egypt

Law No. 175 of 2018, Art. 2 (First) (service providers' duty to secure data) · Read the law's page

• This binds a service provider, any natural or legal person who provides information and communication technology services to users, including one who processes or stores information directly or on behalf of others (Article 1; reached by declaring any activity that provides such a service to users).
• Secure the data and information you handle to ensure its confidentiality, prevent unauthorized access, and protect against damage (Article 2, First).

Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system) · Read the law's page

• This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
• Report the crime to the competent authorities upon becoming aware of it (Article 35).

Law No. 151 of 2020, Articles 19-31 and 34-44 (the Center, judicial control and penalties) · Read the law's page

• Expect the Personal Data Protection Center to decide a complaint against you within thirty working days of its submission, and carry out its decision within seven working days of being told of it, telling the Center once you have.
• Expect the Center's employees, appointed by the Minister of Justice, to hold judicial control powers over violations of the Law.
• Expect the penalties to apply without prejudice to severer sanctions under any other law and without prejudice to an injured party's right to seek damages from you.
• Note that a legal representative of a juristic person is personally penalised for the person's failure to fulfil its obligations, and a Data Protection Officer for failing to carry out the article 9 duties.