Skip to content
World Watch

Cybersecurity law & regulation in Egypt (2026)

Cybersecurity in Egypt: sectoral rules.

Egypt has no single NIS2-style horizontal cybersecurity statute; instead it relies on a combination of a comprehensive cybercrime law (Law 175/2018), a data protection law with security and breach-reporting duties (Law 151/2020, now operational after 2025 executive regulations), and sector-specific frameworks — most notably the Central Bank's mandatory financial cybersecurity framework and NTRA/EG-CERT oversight of telecoms and critical information infrastructure. National direction is set by the Supreme Council for Cybersecurity and the 2023–2027 National Cybersecurity Strategy, and Egypt is ranked in ITU Global Cybersecurity Index Tier 1.

Last verified Official sources first · MethodologyCompare Egypt with other countriesAlso in العربية

Legal framework

Layered regime: Anti-Cyber and Information Technology Crimes Law No. 175/2018 (cybercrime + telecom/service-provider duties); Personal Data Protection Law No. 151/2020 with Executive Regulations No. 816/2025 (breach notification); Central Bank of Egypt Financial Cybersecurity Framework (EGY-FIN CSF, 2021) for banks; Telecommunications Regulation Law No. 10/2003 governing NTRA/EG-CERT; National Cybersecurity Strategy 2023–2027 overseen by the Supreme Council for Cybersecurity.

Key points: cybersecurity in Egypt

  1. Cybercrime & service-provider duties (Law 175/2018)

    Egypt's Anti-Cyber and Information Technology Crimes Law criminalises unauthorised access, hacking and online fraud, and imposes obligations on service providers to retain user/traffic data for 180 days and cooperate with authorities on national-security threats.

    wipo.int loc.gov

  2. Data breach notification (PDPL 151/2020 + 2025 Executive Regulations)

    Controllers and processors must notify the Personal Data Protection Center within 72 hours of becoming aware of a breach (immediately where national security is implicated) and inform affected individuals within three working days. Executive Regulations No. 816/2025 (issued 1 November 2025) activated the regime; full enforcement lands after the one-year grace period on 31 October 2026.

    dataguidance.com kennedyslaw.com bakermckenzie.com

  3. Financial-sector cybersecurity (CBE EGY-FIN CSF)

    The Central Bank of Egypt issued the Egypt Financial Cybersecurity Framework v1.0 in December 2021, setting mandated controls and maturity levels for banks and financial institutions, and established a sectoral CERT for the financial and banking sector.

    cbe.org.eg cbe.org.eg tripwire.com

  4. National coordination & EG-CERT

    The Supreme Council for Cybersecurity, chaired by the Minister of Communications and IT under the Cabinet, launched the National Cybersecurity Strategy 2023–2027. EG-CERT, established by the NTRA in April 2009, provides incident response and early-warning services for government, finance and critical information infrastructure.

    sis.gov.eg egcert.eg tra.gov.eg

  5. Telecom & critical infrastructure oversight (Law 10/2003)

    The Telecommunications Regulation Law No. 10 of 2003 empowers the NTRA to regulate operators and, under Article 67, place providers under direct state control during national-security incidents, natural disasters or general mobilisation — the principal legal hook for critical information infrastructure resilience.

    tra.gov.eg clfr.globalnetworkinitiative.org

  6. International benchmarking

    In the ITU Global Cybersecurity Index 2023–2024, Egypt (represented by NTRA/EG-CERT) is classified in Tier 1 with 100 points, one of 47 countries in the top tier.

    tra.gov.eg

Timeline of decisions

  1. Guidance · official
    National Cybersecurity Strategy 2023-2027 launched

    The Egyptian Supreme Cybersecurity Council launched the second national strategy, aimed at countering rising cyber threats, building cybersecurity human capital, and developing a domestic cybersecurity industry contributing to GDP.

    EG-CERT

  2. Guidance · official
    Central Bank of Egypt issues Financial Cybersecurity Framework

    The CBE published Egypt's first comprehensive cybersecurity regulatory framework (EGY-FIN CSF v1.0) for the banking and financial sector, setting mandatory controls and maturity benchmarks for all CBE-licensed entities.

    Central Bank of Egypt

  3. Law · official
    Anti-Cyber and Information Technology Crimes Law No. 175 of 2018

    Egypt's principal cybercrime statute criminalized hacking and unauthorized access, imposed 180-day data-retention duties on telecom operators and obligations on service providers, and empowered authorities to block websites threatening national security.

    WIPO Lex

  4. Guidance · official
    First National Cybersecurity Strategy (2017-2021) adopted

    The Supreme Cybersecurity Council launched Egypt's inaugural national cybersecurity strategy to secure communications and information infrastructure and provide a trusted environment for digital government services.

    ITU

  5. Law · official
    Egyptian Supreme Cybersecurity Council established

    Prime Ministerial Decree No. 2259 of 2014 created the ESCC, chaired by the MCIT minister with cross-ministry and security-agency membership, mandated to develop and oversee the national cybersecurity strategy.

    Egyptian Supreme Cybersecurity Council

  6. Guidance · official
    EG-CERT established by the NTRA

    The National Telecommunications Regulatory Authority founded the Egyptian Computer Emergency Readiness Team to provide 24/7 incident response, forensics, malware analysis and protection of critical information infrastructure.

    EG-CERT

  7. Law · official
    Telecommunication Regulation Law No. 10 of 2003

    Egypt's foundational telecom law established the NTRA and, via Article 64, imposed strict controls requiring written approval to use encryption equipment and obliging networks to enable lawful access by security agencies, an early pillar of the cybersecurity/surveillance framework.

    NTRA

Sources

  1. wipo.int/wipolex/en/legislation/details/19959
  2. loc.gov/item/global-legal-monitor/2018-10-05/egypt-president-ratifies-anti-cy
  3. dataguidance.com/news/egypt-pdpc-issues-executive-regulations-personal-data
  4. kennedyslaw.com/en/thought-leadership/article/2026/egypt-s-personal-data-protection-l
  5. bakermckenzie.com/-/media/files/insight/publications/2026/01/egypt--important-data-prot
  6. cbe.org.eg/en/cybersecurity
  7. cbe.org.eg/en/cybersecurity/the-cybersecurity-organizational-structure
  8. sis.gov.eg/en/media-center/strategies/national-cybersecurity-strategy/
  9. egcert.eg/about-us/
  10. tra.gov.eg/en/industry/eg-cert/
  11. tra.gov.eg/en/rules/law-no-10-of-2003/
  12. tra.gov.eg/en/egypt-classified-in-tier-1-according-to-itu-global-cybersecurity-i
  13. tripwire.com/state-of-security/complying-egypt-financial-cybersecurity-framework
  14. clfr.globalnetworkinitiative.org/country/egypt/

Next for Egypt: Starting a BusinessModerate

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 3 Sept 2026. Methodology & how to cite · State of Technology Regulation 2026