14 MAR 2026 · National Strategy

Guide to Egypt's National AI Governance Framework

On 14 March 2026, the National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies (NCAI) released the Guide to Egypt’s National AI Governance Framework, prepared by the Egyptian Center for Responsible Artificial Intelligence (ECRAI), which serves as the implementation and technical body of the NCAI. The guide serves as the central strategic document of the framework and defines its scope by introducing risk tiers, a “Dual-Check” compliance logic, and an institut...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 MAR 2026 · Standard / Framework

Egypt releases national guidelines for trustworthy and responsible AI

Primary source (ai.gov.eg) dated 14 March 2026 in EG. See linked source for full text.

Secondary evidenceHuman Rights & EthicsIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Privacy Notice Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Privacy Notice Guidelines (Version 1.1), providing interpretive and regulatory guidance on privacy notices within the scope of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Privacy Notice Guidelines clarify that a privacy notice is a transparency tool and does not constitute a consent request, and distinguish a privacy not...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Data Protection Principles Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Protection Principles Guidelines (Version 1.1). The Guidelines provide interpretive and regulatory guidance on the fundamental principles governing the processing of personal data under the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines set out nine principles, namely lawfulness, fairness, transparency, purpose ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Data Users Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Users Guidelines. These Guidelines clarify the roles and responsibilities of data users under the Personal Data Protection Law. The Guidelines distinguish between controllers who determine the essential means of processing and processors who act on behalf of controllers. These Guidelines detail legal obligations such as the requirement to appoint a Data Protection Officer and obtain the necessary l...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Guidelines on Data Protection Officer Categories

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Guidelines on Data Protection Officer Categories. These Guidelines establish a professional hierarchy for Data Protection Officers (DPOs) in Egypt by categorising them into Category A (Lead DPO), Category B (Advanced DPO), or Category C (Entry-Level DPO). Category A applies to processing more than 2million records and requires three to five years of proven experience and an examination score of more than 80%. Category...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Data Protection Officer Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Protection Officer Guidelines. These Guidelines assist data users in complying with the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. Juridical persons acting as data users must appoint a Data Protection Officer (DPO) regardless of processing scale. Natural persons acting as data users may appoint a DPO or personally as...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Record of Processing Activities Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) issued the Record of Processing Activities Guidelines Version 1.1, providing regulatory guidance on the documentation of personal data processing activities pursuant to the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines state that all data users must document processing activities in a Record of Processing Activities (RoPA) and distinguis...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Electronic Direct Marketing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Electronic Direct Marketing Guidelines (Version 1.1). The Guidelines clarify obligations under Chapter 8 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines apply to Electronic Direct Marketing Communications that are electronic and direct communications targeted at specific individuals to promote goods, services, ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Lawful Bases of Processing Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Lawful Bases of Processing Guidelines, Version 1.1, which outline the lawful bases for processing personal data under Article 6 of the Personal Data Protection Law enacted by Law No. 151 of the year 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines clarify the lawfulness principle and describe how Data Users may identify and assess an appropriate lawful basis prior to initiating a p...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 JAN 2026 · Standard / Framework

Data Subject Consent Guidelines

On 26 January 2026, the Personal Data Protection Center (PDPC) released the Data Subject Consent Guidelines, Version 1.1, setting out non-binding guidance on consent as a lawful basis for processing under Article 3 and Article 6 of the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. The Guidelines identify six lawful bases and explain that consent requires a clear affirmative action and must be assessed case by case...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 JAN 2026 · Policy / Guidance

National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies

In January 2026, the Cabinet approved expanding the mandate of the National Council for Artificial Intelligence (NCAI) to include quantum computing and emerging technologies. Following this decision, the body was renamed the National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies. The expansion reflects a broader remit for the council beyond its original focus on artificial intelligence.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

04 JAN 2026 · Other

Ministers launch new phase of cooperation on digital transformation and AI

Here is a professional English translation suitable for publication on the Ministry’s website: Prof. Dr. Abdelaziz Konsowa: We aim to provide AI...

Secondary evidenceEducation & TrainingIssuing institution: Issuing authority not identified

16 NOV 2025 · National Strategy

Egypt has taken serious steps toward AI governance framework, says foreign minister

Primary source (egyptian-gazette.com) dated 16 November 2025 in EG. See linked source for full text.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

02 NOV 2025 · Executive Order

Operational license requirement in Executive Regulations of the Personal Data Protection Law (Ministerial Decision No. 816 of 2025)

On 2 November 2025, the Executive Regulations of the Personal Data Protection Law issued by Law No. 151 of 2020 entered into force on the day following their publication in the Official Gazette, as issued by Minister of Communications and Information Technology Decision No. 816 of 2025. The Executive Regulations establish a framework for the classification, authorisation, licensing, registration, and accreditation of data controllers, personal data processors, platforms, and related activitie...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 OCT 2025 · International Agreement

EU and Egypt release joint statement on digital connectivity and data governance, covering AI

We, the leaders of the European Union and the Arab Republic of Egypt (hereinafter Egypt), held our first EU-Egypt Summit in Brussels, Belgium on 22 October 2025 and concluded the following:\n\nToday\'s S

Primary legal sourceCybersecurity ·Data Privacy & ProtectionOfficial source · ec.europa.eu ↗

01 SEP 2025 · Other

Governing AI with inclusion: An Egyptian model for the Global South

Egypt has accelerated its commitment to AI as a pillar of its vision for sustainable development.

Official materialNational StrategyOfficial source · oecd.ai ↗

07 AUG 2025 · Executive Order

National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services

On 7 August 2025, the National Telecommunications Regulatory Authority's Regulatory Framework for Providing Cybersecurity Services entered into force. The framework defines regulatory requirements for entities providing or using cybersecurity services. It specifies terms such as cybersecurity services, critical infrastructure, and service providers, and mandates adherence to technical and organisational standards. The framework establishes obligations for service providers, including complia...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

29 APR 2025 · International Agreement

BRICS+ sign declaration on AI governance

Declaração da Presidência da Reunião de Ministros das Relações Exteriores/Relações Internacionais dos Países Membros do BRICS [*]

Primary legal sourceData Privacy & Protection ·Generative AIOfficial source · gov.br ↗

18 DEC 2024 · Other

Egypt preparing laws to regulate AI, data exchange and classification

Primary source (english.ahram.org.eg) dated 18 December 2024 in EG. See linked source for full text.

Secondary evidenceData Privacy & Protection ·Generative AIIssuing institution: Issuing authority not identified

12 SEP 2024 · National Strategy

National Council's second version of National Artificial Intelligence Strategy

On 9 December 2024, the Minister of Communications and Information Technology announced the launch date of the second version of the National Artificial Intelligence Strategy, set for early 2025. The revised strategy aims to further integrate AI across various sectors, tackle societal challenges, broaden training programs for specialized talent, and improve computational infrastructure for government and private entities, including startups and small and medium-sized enterprises (SMEs).

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 AUG 2024 · Executive Order

Data localisation requirement in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including data localisation requirements entered into force. The policy mandates the localisation of data classified as "top secret" or "secret," requiring that such data be hosted exclusively within Egypt. This provision applies to data related to national security or sensitive operations and aims to ensure maximum protection against unauthorised access, breaches, or manipulation. The policy specifies that ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 AUG 2024 · Executive Order

Cybersecurity requirements in Cloud First Policy (2024)

On 22 August 2024, the Supreme Council of Digital Society's Cloud First Policy (2024) including cybersecurity requirements entered into force. The policy mandates that cloud service providers (CSPs) must establish necessary technical and organisational procedures to manage security risks through the adoption of security standards certificates issued by the Egyptian Supreme Cybersecurity Council (ESCC). The policy also requires the development of encryption foundations, including full control ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 JUN 2023 · Executive Order

Minister of Finance Decree no. 160 including VAT guidelines for digital services and other remote services provided by non-residents

On 22 June 2023, the Minister of Finance's Decree no. 160 of 2023 issuing the value-added tax (VAT) guidelines for digital services and other remote services provided by non-residents entered into force. The guidelines require non-resident service providers and electronic distribution platform (EDP) operators offering remote services to Egyptian customers to register and remit VAT, with a standard rate of 14% and 10% for professional and consultancy services. Business-to-business (B2B) trans...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 MAY 2023 · Other

Parliament to issue document evaluating AI ethics and controls in Egypt

The Education Committee of the Egyptian Senate agreed on the need to issue a document evaluating the ethics and control of Artificial Intelligence (AI) in Egypt .

Secondary evidenceEducationIssuing institution: Issuing authority not identified

19 APR 2023 · Law / Act

Charter for Responsible Artificial Intelligence

On 19 April 2023, the National Council for Artificial Intelligence (AI) adopted the Egyptian Charter for Responsible AI, marking the first phase of its initiative to regulate AI systems within the country. The charter mandates that AI systems should not harm individuals, especially vulnerable groups, and should comply with Egyptian laws. It also stresses the importance of human oversight, risk management, and the involvement of qualified, diverse teams in AI development. Additionally, the cha...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

25 JAN 2023 · Policy / Guidance

Egypt-India Memorandums of Understanding on ICT and cybersecurity cooperation

On 25 January 2023, the Egyptian President and Indian Prime Minister signed several Memorandums of Understanding (MoUs). The MoUs, which include agreements in the areas of Information and Communication Technology (ICT), cybersecurity, were signed during the Egyptian President's three-day visit to India. The MoUs aim to enhance cooperation in these sectors, focusing on knowledge exchange and sharing best practices.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

23 JAN 2023 · International Agreement

Egypt-Palestine Memorandum of Understanding on ICT cooperation

On 23 January 2023, the Egyptian Minister of Communication and Information Technology and the Palestinian Minister of Communications and Information Technology signed a Memorandum of Understanding (MoU) to promote cooperation in Information and Communications Technology (ICT). The MoU covers technical cooperation in policy formulation and implementation. It also aims to establish cooperation mechanisms, share expertise, and adopt best practices to improve operational efficiency.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 SEP 2022 · Law / Act

NCCM/EG-CERT review and amendment of Egypt's Child Online Protection Strategy

On 26 September 2022, the Egyptian National Computer Emergency Readiness Team (EG-CERT), in cooperation with the National Council for Childhood and Motherhood (NCCM), launched an initiative to review and amend Egypt’s Child Online Protection Strategy. A committee, composed of representatives from the concerned authorities in the country, has been formed to develop a national strategy aimed at addressing the evolving online risks to children and improving the effectiveness of protection measur...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

26 MAY 2021 · National Strategy

Egypt’s AI strategy is more about development than AI

Egypt is striving to exploit AI technologies to serve its development goals and foster regional co-operation on AI.

Official materialNational StrategyOfficial source · oecd.ai ↗

21 JAN 2021 · Policy / Guidance

EG-CERT advisory on potential cyber threats

On 21 January 2021, the Egyptian National Computer Emergency Readiness Team (EG-CERT) issued an advisory on potential cyber threats. The advisory includes a set of actions and measures that institutions must take to protect their assets and networks from cyber threats. The advisory highlights the risks to digital infrastructure and the potential impact on public safety from cyber incidents, including ransomware attacks and website defacement. It outlines key measures such as multi-factor auth...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 OCT 2020 · Law / Act

Operational license requirement in Personal Data Protection Law (No. 151 of 2020)

On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law mandated that entities processing personal data obtain an operational licence from the Personal Data Protection Center (PDPC). This licence is necessary for collecting, storing, or processing personal data and specifies permitted activities and validity duration. The law outlines procedures for licence application and renewal, as well as penalties for operating without a valid licence, which may inc...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 OCT 2020 · Law / Act

Measures establishing Personal Data Protection Center in Personal Data Protection Law (No. 151 of 2020)

On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law establishes the Personal Data Protection Center (PDPC) as the national authority overseeing data protection. The PDPC is responsible for developing policies, standards, and guidelines to protect personal data. Its governance includes a board of directors with representatives from key ministries and agencies. The PDPC issues licences, conducts inspections, and enforces compliance through legal action...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

28 AUG 2020 · Executive Order

Cybersecurity regulation in Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020)

On 28 August 2020, Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020) entered into force. The Executive Regulation outlines cybersecurity measures to safeguard data and digital infrastructures against threats. It mandates the use of encryption standards, such as Advanced Encryption Standard (AES) with a minimum key length of 128 bits for general systems and 256 bits for critical infrastructure. Additionally, ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

18 AUG 2020 · Law / Act

Content moderation regulation in Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation

On 18 August 2020, Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (SCMR) entered into force. Entities, institutions, press, media outlets, and websites were required to comply with the provisions of the law and its executive regulation within six months of the enforcement of the executive regulation. The law prohibits media outlets and electronic platforms from publishing or broadcasting content that incites violence, hatred, or discrimination, or that viola...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

17 FEB 2020 · Executive Order

Content moderation regulation in Executive Regulation for Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (Prime Minister's Decree No. 418 of 2020)

On 17 February 2020, the Executive Regulations for Law No. 180 of 2018 on Press, Media, and the Supreme Council for Media Regulation (SCMR) (Prime Minister's Decree No. 418 of 2020) entered into force. The regulation mandates that media outlets, including newspapers and electronic media, must operate within the framework set by the SCMR. This includes requirements for notifying the SCMR of changes in ownership, management, or operational details, as well as adhering to specific guidelines for...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

National Strategy

Egypt National Artificial Intelligence Strategy (First Edition)

AI law in Egypt: Egypt's first National AI Strategy launched in 2021 aims to position the country as a regional AI leader by focusing on capacity building, government digitization, sectoral AI applications, and international cooperation. The strategy establishes the National Council for AI under MCIT to oversee implementation....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Standard / Framework

National Guidelines for Trustworthy and Responsible AI (2026)

Primary source (ai.gov.eg) in EG. See linked source for full text.

Secondary evidenceHuman Rights & EthicsIssuing institution: Issuing authority not identified

Law / Act

Egyptian Charter for Responsible AI (2023)

Primary source (aicm.ai.gov.eg) in EG. See linked source for full text.

Secondary evidenceSafe & Responsible AiIssuing institution: Issuing authority not identified

National Strategy

National AI Strategy (2021)

The National Council for Artificial Intelligence (NCAI), established in 2019, serves as Egypt’s highest authority for AI policy direction and governance. Chaired by the ICT Minister, the Council brings together representatives from government, academia, and industry to ensure a coordinated and future-ready national approach. In January 2026, NCAI expanded its mandate and became the National Council for Artificial Intelligence, Quantum Computing, and Emerging Technologies, reflecting global technological advances and aligning with international standards. The Council is responsible for: - Issui

Secondary evidenceEnergy & EnvironmentIssuing institution: Issuing authority not identified