Last review date: January 2025

Yes

Transfers of personal data to third countries are only permissible if there is a legal basis for the processing/transfer and one of the following applies:

☒   approved adequate/whitelisted jurisdictions

☒    other solutions

Transfers of personal data outside Egypt may only be undertaken if the level of data protection and security meets or exceeds the requirements of the Personal Data Protection Law and subject to the transferring organization obtaining the relevant license or permit from the Personal Data Protection Commission. The detailed criteria and rules in this regard will be set out in the pending executive regulations.

Further, if the explicit consent of a data subject or their representative is obtained, personal data may be transferred without the aforementioned minimum protection levels if the purpose is: (i) to preserve the data subject’s life and provide them with medical care; (ii) to perform obligations in order to ensure that a right is proven, exercised or defended before the judiciary; (iii) to conclude an agreement or execute an agreement already concluded or, to be concluded, for the benefit of the data subject; (iv) to perform a procedure relating to international judicial cooperation; (v) in the interests of legal necessity or obligation to protect the public interest; (vi) to transfer money to another country pursuant to the laws in force of that country; (vii) pursuant to a bilateral or multilateral international agreement to which Egypt is a party.

Please see separate question for information on data localization provisions that are not restricted to personal data.