Permissibility of cloud
1. Are financial institutions legally permitted to use cloud services?

Whether financial institutions are allowed to use cloud services must be considered on a case-by-case basis and may also depend on the identity of their regulator. In the case of banking institutions regulated by the Central Bank of Egypt, Egyptian Banking Law is generally silent on the use of cloud services, although provision is made for low-risk banking information other than customer data. On the other hand, the Financial Regulatory Authority which regulates stock brokerage companies, the stock exchange and the Misr for Central Clearing, Depository and Registry, expressly allows the use of cloud network services in relation to data shared between such entities.

While the National Telecom Regulatory Authority authorises and regulates data centers and cloud service providers under the Personal Data Protection Law No. 151 of 2020 (DPL), this legislation does not generally extend directly to financial institutions.