Is a lender, in Egypt

Law No. 175 of 2018, Art. 2 (First) (service providers' duty to secure data) · Read the law's page

• This binds a service provider, any natural or legal person who provides information and communication technology services to users, including one who processes or stores information directly or on behalf of others (Article 1; reached by declaring any activity that provides such a service to users).
• Secure the data and information you handle to ensure its confidentiality, prevent unauthorized access, and protect against damage (Article 2, First).

Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system) · Read the law's page

• This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
• Report the crime to the competent authorities upon becoming aware of it (Article 35).

Law No. 151 of 2020, Article 12 (Sensitive Personal Data and a child's data) · Read the law's page

• Obtain a Personal Data Protection Center license before collecting, storing, transferring, or processing any Sensitive Personal Data, including a biometric, health, genetic, financial, religious, political, or criminal-record identifier, or any data relating to a child.
• Obtain a parent or legal guardian's consent before processing a child's personal data, and do not condition a child's participation in a game, competition, or activity on personal data beyond what participation requires.
• Obtain the Data Subject's explicit written consent before any dealing with their Sensitive Personal Data, outside the cases a law authorises, on top of the Center's licence.
• Treat any data relating to a child as Sensitive Personal Data in every case, whatever its subject matter.