EgyptLaw No. 175 of 2018, Duty of a Legal Entity's Manager to Report a Crime Against Its System
Law No. 175 of 2018, Art. 35 (duty to report a crime against an entity's system)
In force since .
A vulnerability and incident reporting rule binding public and private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Reporting
As of .
What it requires
- This binds any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in Law No. 175 of 2018, whether or not any personal data is involved.
- Report the crime to the competent authorities upon becoming aware of it (Article 35).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureYes
Private right of actionNo
Criminal exposure note
Imprisonment of not less than three months and a fine of EGP 30,000 to 100,000, or either penalty, for a person responsible for the actual management of a legal entity who fails to report to the competent authorities, on becoming aware of it, a crime stipulated in the Law against the entity's designated website, account, email or information system (Art. 35). Reconciliation of an Article 35 charge requires the Authority's approval (Art. 42).
Penalty structure
Article 35 sets a fine of not less than EGP 30,000 and not more than EGP 100,000, together with imprisonment of not less than three months, or either of those two penalties.
- Rule
- Fixed only
- As of
- Minimum
- 30,000
- Currency
- EGP
- Fixed cap
- 100,000
Who enforces it
Enforcement body
The National Telecommunications Regulatory Authority, through which reconciliation of an Article 35 charge is accepted (Article 42).
Settledness
- As of
- Open questions
- Which authority is the competent authority to which the crime is reported under Article 35, given that the Article names the competent authorities without identifying them?
What this law does
Article 35 of Law No. 175 of 2018 punishes, by imprisonment for not less than three months and a fine of EGP 30,000 to 100,000, or by either penalty, any person responsible for the actual management of a legal entity whose designated website, account, email or information system is subjected to a crime stipulated in the Law and who fails to report it to the competent authorities upon becoming aware of it.
Article 42 allows reconciliation of the misdemeanors in Articles 29 and 35 only through the National Telecommunications Regulatory Authority. Article 1 defines the Authority as the National Telecommunications Regulatory Authority. Article 45 provides that Law No. 175 of 2018 comes into force on the day following its publication in the Official Gazette. The Law entered into force on .
When LexLint raises it
When your app profile says your app crawls the web, trains models, deploys a chatbot, sends automated outreach, makes high-risk automated decisions, processes voice recordings, processes biometric data, serves under-18s, operates a social platform, ships a mobile app, distributes a software product, runs an essential service, provides financial services, handles health records, provides telecom services, is a listed company, generates content with AI, publishes adult content, operates an app store, reuses other publishers' content, records calls, records text chat or tracks devices.