التوافق مع قانون حماية البيانات الشخصية 151 | EgyHosting
Your data inside Egypt, your obligations clearer
If you collect personal data of people in Egypt — customers, website visitors, employees, patients, students — this law applies to you. This page explains your main obligations, and exactly where your hosting location makes a difference.
The clause most companies trip over: where the data lives
The law treats transfers of personal data outside Egypt as a special case: they require a permit from the Personal Data Protection Centre and safeguards ensuring an appropriate level of protection at the receiving end.
If your data is hosted inside Egypt, there is no cross-border transfer in the first place — so that obligation does not arise. This is not a technical detail: it removes an entire item from your list.
Most companies do not even know their website is hosted abroad, because that decision was made years ago or made on their behalf.
Does the law apply to you?
If any one of these is true for you, the answer is yes.
A site with a form
Sign-ups, quote requests, appointment bookings, newsletters — all personal data.
An online store
Names, addresses, phone numbers, order history — and usually advertising cookies too.
Employee data
HR files, payroll and CVs are personal data as well.
Health or children's data
Clinics, labs, schools and nurseries: these are sensitive categories with stricter conditions.
Tracking and ads
Analytics tools and ad pixels collect data and need consent before they run.
You host for others
If you are a web agency, you are a processor of your clients' customers' data.
Your main obligations — and where we help
This table separates what is on you from what is handled simply by hosting with us.
| Obligation | Whose responsibility | EgyHosting's role |
|---|---|---|
| A legal basis for collection (consent, contract or legal obligation) | You | We explain the practical difference in the consultation |
| A published, clear privacy policy | You | Ours is published as a model, and we can prepare one for your site |
| A data processing agreement with every processor (your host included) | You and your processor | Ours is published and we sign it with you, plus a free template for your other vendors |
| Consent before non-essential cookies | You | We install a real consent banner on your site that blocks tracking until consent |
| Securing data and encrypting backups | Shared | Encryption, firewalls, monitoring, encrypted backups inside Egypt |
| Reporting breaches on time | You, towards the Centre | We notify you within 48 hours so you can meet your own deadline |
| Appointing a data protection officer | You | We explain when it is required and work directly with your officer |
| A permit for transferring data outside Egypt | You | Does not arise if you host inside Egypt |
What we actually provide
You can verify every point here yourself from the links at the bottom of this page.
Storage inside Egypt
Data centres inside Egypt for Egyptian services, with backups also inside Egypt and encrypted.
A data processing agreement
Published in full on our website, with a security annex and sub-processor list, and a signed copy on request.
Notification within 48 hours
A written commitment in the agreement, so you can meet your own deadline towards the Centre.
A real cookie consent banner
We built ours: no tracker runs before consent. We can install one on your site.
Documents you can show your auditor
Terms, policy and agreement written against the Egyptian law, not translated foreign templates.
Migration from abroad
If your site is hosted abroad, we migrate it and make sure everything works.
To be clear — what we do not provide
- We are not a legal practice; our consultation is purely technical and does not replace review by a lawyer.
- We do not guarantee your compliance — that is your responsibility; we provide the infrastructure and documents that make it easier.
- We make no claim to hold an accreditation or licence from the Personal Data Protection Centre.
- Hosting inside Egypt removes the cross-border transfer requirement, but it does not make you compliant on its own.
Want to know where you stand?
Talk to us and we will go through the technical side with you: where your data sits, which agreements you are missing, cookies, backups, and who can access your data. The first thirty minutes are free.
Our documents: Terms of Service · Privacy Policy · Data Processing Agreement · free DPA template · compliance self-check
Frequently asked
Does hosting inside Egypt make me compliant?
No. It removes the cross-border transfer permit requirement, which is a significant item, but you still need a legal basis for collection, a privacy policy, agreements with your processors, cookie consent, and a breach procedure.
I am hosted outside Egypt — what should I do?
Two routes: apply to the Personal Data Protection Centre for a transfer permit and meet its conditions, or move your hosting to Egypt so the permit does not apply at all. Talk to us and we will work out which suits your case; we handle the migration.
Why do I need a data processing agreement with my host?
Because the host processes your customers' data on your behalf, and the law requires that relationship to be set out in a written agreement covering purposes, obligations, deletion periods and breach notification. Ours is published, and we sign it on request.
Are my ad pixels and analytics a problem?
They are not forbidden, but they must not run before the visitor consents, and your privacy policy must name them and state that the data is processed outside Egypt. We did this on our own site and can do it on yours.
Is this consultation legal advice?
No, it is technical. We review where your data sits, your settings and your technical documents. For the legal side we refer you to a specialised lawyer; the two complement each other.
