Egyptian Law on Data Protection and Artificial Intelligence
Overview of Data Protection Law (DPL)
The Data Protection Law (DPL) is an omnibus law that applies to personal data collected, controlled, or processed digitally. It defines key terms such as:
- Personal data: any information relating to a natural person who can be identified, directly or indirectly.
- Data subject: the natural person whose personal data is being processed.
- Data possessor: the entity that controls and makes decisions on how to process personal data.
- Data processor: an entity that processes personal data on behalf of the data possessor.
Data Processing
Under the DPL, data processing refers to any electronic means of:
- Collecting
- Recording
- Storing
- Merging
- Displaying
- Sending
- Receiving
- Circulating
- Publishing
- Erasing
- Changing
- Editing
- Retrieving
- Analyzing
personal data.
Obligations of Data Controllers and Processors
The DPL imposes obligations on data controllers and processors, including:
- Legitimate purpose: collecting, retaining, and processing personal data for a legitimate purpose notified to the data subject.
- Accuracy and security: ensuring the accuracy and security of personal data.
- Conformity with stated purpose: processing in conformity with the stated purpose.
- Retention period: not retaining personal data beyond what is required.
Excluded Activities
The DPL excludes certain activities from its provisions, which are dealt with by special laws or statutes.
Sectoral Legislation
While the DPL provides a general framework for data protection, sectoral legislation (such as Fintech Law, Telecommunications Law, and Consumer Protection Law) addresses privacy and personal data separately in specific sectors.
Pending Changes and Hot Topics
The draft mentions that the enactment of executive regulations for the DPL is pending, along with the establishment of a Data Protection Committee (DPC). These developments are crucial for effectuating the incorporation of the DPC and determining procedural application pertaining to data protection.
AI Developments in Egypt
At the time of writing, new laws regarding AI have yet to be issued in Egypt. The Egyptian Charter for Responsible AI serves as a guiding framework emphasizing principles of transparency, fairness, and accountability in AI development and deployment.