‫ﺗﺮﺟﻤﺔ ﻗﺎﻧﻮن‬

‫ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳌﺼﺮي‬

‫رﻗﻢ ‪ ١٥١‬ﻟﺴﻨﺔ ‪٢٠٢٠‬‬

‫ﻗﺎﻧﻮن رﻗﻢ ‪ ١٥١‬ﻟﺴﻨﺔ ‪٢٠٢٠‬‬

‫ﻗﺎﻧﻮن ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
‫‪Law Number 151 for the Year 2020‬‬
‫‪Personal Data Protection Law‬‬

‫ﻣﺮاﺟﻌﺔ ﻗﺎﻧﻮﻧﻴﺔ‬ ‫إﻋﺪاد‬

‫د‪ .‬ﻣﺮوه زﻳ ــﻦ‬ ‫أ‪ .‬ﻣﺮﱘ أﺑﻮ اﳌﺠﺪ‬
‫أ‪ .‬راﻧﺎ ﻳﻮﻧﺲ‬ ‫أ‪ .‬ﺗ ـﻘـ ــﻰ أﺳ ـ ـ ــﺎﻣ ــﺔ‬
‫ﺗﺮﺟﻤﺔ ﻗﺎﻧﻮن‬
‫ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳌﺼﺮي‬
‫رﻗﻢ ‪ ١٥١‬ﻟﺴﻨﺔ ‪٢٠٢٠‬‬
 ‫ﺗﺮﺟﻤﺔ ﻗﺎﻧﻮن ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳌﺼﺮي‬ ‫ﻓــﺮﻳـ ــﻖ‬
‫رﻗﻢ )‪ (١٥١‬ﻟﺴﻨﺔ ‪٢٠٢٠‬‬ ‫إﻋ ـ ـ ـ ـ ــﺪاد‬

‫اﻹﺷﺮاف اﻟﻌﺎم ﻋﻠﻰ أﻋﻤﺎل اﻟﺘﺮﺟﻤﺔ واﳌﺮاﺟﻌﺔ اﻟﻘﺎﻧﻮﻧﻴ ـ ــﺔ ‪:‬‬

‫أ‪ .‬د‪ .‬ﺣﺴﻦ ﻋﺒﺪ اﳊﻤﻴﺪ‬

‫ﻋﻤﻴﺪ ﻛﻠﻴﺔ اﻟﻘـﺎﻧﻮن ﺑﺎﳉـﺎﻣﻌـﺔ اﻟﺒﺮﻳﻄﺎﻧﻴﺔ‬
‫وﻣﺪﻳﺮ ﻣﺮﻛﺰ ﺑﺤﻮث اﻟﻘﺎﻧﻮن واﻟﺘﻜﻨﻮﻟﻮﺟﻴﺎ‪.‬‬
 ‫إﻋﺪاد‪:‬‬

‫أ‪ .‬ﺗﻘﻰ أﺳﺎﻣﺔ‬ ‫أ‪ .‬ﻣﺮﱘ أﺑﻮ اﳌﺠﺪ‬

‫ﻣﺮاﺟﻌﺔ ﻗﺎﻧﻮﻧﻴﺔ‬

‫أ‪ .‬راﻧﺎ ﻳﻮﻧﺲ‬ ‫د‪ .‬ﻣﺮوه زﻳﻦ‬

 Article ‫اﳌﺎدة‬

Articles of Issuance ‫ﻣﻮاد اﻹﺻﺪار‬

Article One ١ ‫اﳌﺎدة‬

The provisions of this law and the accompanying law ‫ﻳﻌﻤﻞ ﺑﺄﺣــــﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن واﻟﻘﺎﻧﻮن اﳌﺮاﻓــــﻖ ﻓـﻲ ﺷﺄن‬
regarding the partial or total protection of electronically ‫ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳌﻌﺎﳉﺔ إﻟﻜﺘﺮوﻧﻴﺎ ﺟﺰﺋﻴﺎ أو ﻛﻠﻴﺎ‬
processed personal data are enforced on any possessor,
‫ وذﻟﻚ ﺑﺎﻟﻨﺴــــﺒﺔ‬،‫ﻟﺪى أي ﺣــﺎﺋﺰ أو ﻣﺘﺤﻜــﻢ أو ﻣﻌﺎﻟﺞ ﻟﻬﺎ‬
controller, or processor thereof, for natural persons.
.‫ﻟﻸﺷﺨﺎص اﻟﻄﺒﻴﻌﻴﲔ‬

Article Two ٢ ‫اﳌﺎدة‬

The provisions of this law and the accompanying law are ‫ﺗﺴﺮي أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن واﻟﻘﺎﻧﻮن اﳌﺮاﻓﻖ ﻟﻪ ﻋﻠﻰ ﻛﻞ ﻣﻦ‬
enforced on everyone who commits one of the crimes ‫ارﺗﻜﺐ إﺣﺪى اﳉﺮاﺋﻢ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﻟﻘﺎﻧﻮن اﳌﺮاﻓﻖ‬
stipulated in the accompanying law whenever the
‫ﻣﺘﻰ ﻛﺎن اﳉــــــﺎﻧﻲ ﻣﻦ اﳌﺼـــﺮﻳــــﲔ داﺧـــﻞ اﳉﻤﻬــــﻮرﻳـــــﺔ‬
perpetrator is of the Egyptians inside or outside the
‫ أو ﻛﺎن ﻣﻦ ﻏﻴﺮ اﳌﺼﺮﻳــــــﲔ اﳌﻘﻴﻤﲔ داﺧﻞ‬،‫و ﺧﺎرﺟﻬـــــﺎ‬
republic, or non- Egyptians residing inside the republic,
‫ أو ﻛﺎن ﻣﻦ ﻏﻴﺮ اﳌﺼﺮﻳﲔ ﺧﺎرج اﳉﻤﻬﻮرﻳﺔ إذا‬،‫اﳉﻤﻬﻮرﻳﺔ‬
or of non- Egyptians outside the Republic if the act is
punishable in the country in which it occurs under any ‫ﻛﺎن اﻟﻔﻌﻞ ﻣﻌﺎﻗﺒﺎ ﻋﻠﻴﻪ ﻓـﻲ اﻟﺪوﻟﺔ اﻟﺘﻲ وﻗﻊ ﻓﻴﻬﺎ ﲢﺖ أي‬
legal description and the data subject of the crime ‫وﺻﻒ ﻗﺎﻧﻮﻧﻲ وﻛﺎﻧﺖ اﻟﺒﻴــــــﺎﻧﺎت ﻣﺤﻞ اﳉﺮﳝﺔ ﳌﺼﺮﻳـــﲔ‬
belongs to Egyptians or foreigners residing in the .‫أو أﺟﺎﻧﺐ ﻣﻘﻴﻤﲔ داﺧﻞ اﳉﻤﻬﻮرﻳﺔ‬
Republic.

Article Three ٣ ‫اﳌﺎدة‬

The provisions of the accompanying law shall not apply :‫ﻻ ﺗﺴﺮي أﺣﻜﺎم اﻟﻘﺎﻧﻮن اﳌﺮاﻓﻖ ﻋﻠﻰ ﻣﺎ ﻳﺄﺗﻲ‬
to the following: ‫ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻟﺘﻲ ﻳﺤﺘﻔﻆ ﺑﻬﺎ اﻷﺷﺨﺎص‬-١
1- Personal data possessed by natural persons for others
.‫ وﻳﺘﻢ ﻣﻌﺎﳉﺘﻬﺎ ﻟﻼﺳﺘﺨﺪام اﻟﺸﺨﺼﻲ‬،‫اﻟﻄﺒﻴﻌﻴﻮن ﻟﻠﻐﻴﺮ‬
and processed for personal use.
‫ اﻟﺒﻴـــــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻟﺘﻲ ﺗﺘﻢ ﻣﻌﺎﳉﺘﻬـــــﺎ ﺑﻐﺮض‬-٢
2- Personal data that is processed for the purpose of
‫اﳊﺼﻮل ﻋﻠﻰ اﻟﺒﻴﺎﻧﺎت اﻹﺣﺼﺎﺋﻴــــــﺔ اﻟﺮﺳﻤﻴﺔ أو ﺗﻄﺒﻴﻘـــﺎ‬
obtaining official statistical data or in application of a
legal provision, .‫ﻟﻨﺺ ﻗﺎﻧﻮﻧﻲ‬
3- Personal data that is processed exclusively for press ‫ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴــــــﺔ اﻟﺘﻲ ﺗﺘﻢ ﻣﻌﺎﳉﺘﻬــــﺎ ﺣﺼﺮا‬-٣
purposes provided that it is true and accurate, and that it ،‫ﻟﻸﻏﺮاض اﻹﻋﻼﻣﻴﺔ ﺑﺸﺮط أن ﺗﻜﻮن ﺻﺤﻴﺤﺔ ودﻗﻴﻘﺔ‬
is not used for any other purposes, without prejudice to ‫ وذﻟﻚ دون اﻹﺧﻼل‬،‫وأﻻ ﺗﺴﺘﺨﺪم ﻓـﻲ أي أﻏﺮاض أﺧﺮى‬
the legislations governing press and media. .‫ﺑﺎﻟﺘﺸﺮﻳﻌﺎت اﳌﻨﻈﻤﺔ ﻟﻠﺼﺤﺎﻓﺔ واﻹﻋﻼم‬
4- Personal data related to judicial seizure records, ‫ اﻟﺒﻴـــــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳌﺘﻌﻠﻘﺔ ﲟﺤﺎﺿﺮ اﻟﻀﺒــــــﻂ‬-٤
investigations, and lawsuits. .‫اﻟﻘﻀﺎﺋﻲ واﻟﺘﺤﻘﻴﻘﺎت واﻟﺪﻋﺎوي اﻟﻘﻀﺎﺋﻴﺔ‬
5- Personal data at national security authorities, and what ‫ وﻣﺎ‬،‫ اﻟﺒﻴــــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪى ﺟﻬـــــﺎت اﻷﻣﻦ اﻟﻘﻮﻣﻲ‬-٥
is specified for further considerations. .‫ﺗﻘﺪره ﻻﻋﺘﺒﺎرات أﺧﺮى‬

٥
 Article Three ٣ ‫ﺗﺎﺑﻊ اﳌﺎدة‬
The Centre, upon the request of the national security ‫ إﺧﻄﺎر‬،‫ ﺑﻨﺎء ﻋﻠﻰ ﻃﻠﺐ ﺟﻬﺎت اﻷﻣﻦ اﻟﻘﻮﻣﻲ‬،‫وﻳﺠﺐ ﻋﻠﻰ اﳌﺮﻛﺰ‬
authorities, shall notify the controller or the processor of ‫اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﺑﺘﻌﺪﻳﻞ أو ﻣﺤﻮ أو ﻋﺪم إﻇﻬﺎر أو إﺗﺎﺣﺔ أو ﺗﺪاول‬
the modifications, deletion, or non-display, availability, or
‫ وﻓﻘﺎ ﻻﻋﺘﺒﺎرات‬،‫ ﺧﻼل ﻣﺪة زﻣﻨﻴﺔ ﻣﺤﺪدة‬،‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
personal data dissemination , within a specified period of
‫ وﻳﻠﺘﺰم اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﺑﺘﻨﻔﻴﺬ ﻣﺎ ورد ﺑﺎﻹﺧﻄﺎر‬،‫اﻷﻣﻦ اﻟﻘﻮﻣﻲ‬
time, in accordance with national security considerations,
.‫ﺧﻼل اﳌﺪة اﻟﺰﻣﻨﻴﺔ اﶈﺪدة ﺑﻪ‬
and the controller or the processor shall be committed to
implement what is stated in the notification within the
specified period of time. ‫ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪى اﻟﺒﻨﻚ اﳌﺮﻛﺰي اﳌﺼﺮي واﳉﻬﺎت‬-٦
6- Personal data at the Central Bank of Egypt and entities ‫ ﻋﺪا ﺷﺮﻛﺎت ﲢﻮﻳﻞ اﻷﻣﻮال‬،‫اﳋﺎﺿﻌﺔ ﻟﺮﻗﺎﺑﺘﻪ وإﺷﺮاﻓﻪ‬
subject to its control and supervision, with the exception ‫ ﻋﻠﻰ أن ﻳﺮاﻋﻰ ﻓـﻲ ﺷﺄﻧﻬﻤﺎ اﻟﻘﻮاﻋﺪ‬،‫وﺷﺮﻛﺎت اﻟﺼﺮاﻓﺔ‬
of money transfer companies and foreign exchange ‫اﳌﻘﺮرة ﻣﻦ اﻟﺒﻨﻚ اﳌﺮﻛﺰي اﳌﺼﺮي ﺑﺸﺄن اﻟﺘﻌﺎﻣﻞ ﻣﻊ اﻟﺒﻴﺎﻧﺎت‬
companies, provided that they observe the rules .‫اﻟﺸﺨﺼﻴﺔ‬
established by the Central Bank of Egypt regarding dealing
with personal data.

Article Four ٤ ‫اﳌﺎدة‬

The Minister of Communications and Information
‫ﻳﺼﺪر اﻟﻮزﻳﺮ اﳌﻌﻨﻲ ﺑﺸﺌﻮن اﻻﺗﺼﺎﻻت وﺗﻜﻨﻮﻟﻮﺟﻴﺎ اﳌﻌﻠﻮﻣﺎت‬
Technology shall issue the executive regulation of the
accompanying law within six months from the date of the ‫اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻠﻘﺎﻧﻮن اﳌﺮاﻓﻖ ﺧﻼل ﺳﺘﺔ أﺷﻬﺮ ﻣﻦ ﺗﺎرﻳﺦ‬
implementation of this law. .‫اﻟﻌﻤﻞ ﺑﻬﺬا اﻟﻘﺎﻧﻮن‬

Article Five ٥ ‫اﳌﺎدة‬

Economic courts are competent to hear crimes ‫ﺗﺨﺘﺺ اﶈﺎﻛﻢ اﻻﻗﺘﺼﺎدﻳــــــﺔ ﺑﻨﻈﺮ اﳉﺮاﺋﻢ اﻟﺘﻲ ﺗﺮﺗﻜﺐ‬
committed in violation of the provisions of the .‫ﺑﺎﳌﺨﺎﻟﻔﺔ ﻷﺣﻜﺎم اﻟﻘﺎﻧﻮن اﳌﺮاﻓﻖ‬
accompanying law.

Article Six ٦ ‫اﳌﺎدة‬

The addressees are committed by the provisions of this ‫ﻳﻠﺘﺰم اﳌﺨﺎﻃﺒﻮن ﺑﺄﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن ﺑﺘﻮﻓﻴﻖ أوﺿﺎﻋﻬـــﻢ‬
law to reconcile their status in accordance with the ‫ وذﻟﻚ‬،‫ﻃﺒﻘﺎ ﻷﺣﻜﺎم اﻟﻘﺎﻧﻮن اﳌﺮاﻓﻖ وﻻﺋﺤﺘﻪ اﻟﺘﻨﻔﻴﺬﻳــــﺔ‬
provisions of the accompanying law and its executive
.‫ﺧﻼل ﺳﻨﺔ ﻣﻦ ﺗﺎرﻳﺦ ﺻﺪور ﻫﺬه اﻟﻼﺋﺤﺔ‬
regulation, within one year from the date of issuance of
these regulation.

Article Seven ٧ ‫اﳌﺎدة‬

This law shall be published in the Official Gazette, and ‫ وﻳﻌﻤﻞ ﺑﻪ ﺑﻌﺪ‬،‫ﻳﻨﺸﺮ ﻫﺬا اﻟﻘﺎﻧﻮن ﻓـﻲ اﳉﺮﻳﺪة اﻟﺮﺳﻤﻴﺔ‬
shall be inforce after three months from the day .‫ﻣﻀﻰ ﺛﻼﺛﺔ أﺷﻬﺮ ﻣﻦ اﻟﻴﻮم اﻟﺘﺎﻟﻲ ﻟﺘﺎرﻳﺦ ﻧﺸﺮه‬
following the date of its publication. This law shall be
‫ وﻳﻨﻔﺬ ﻛﻘﺎﻧﻮن ﻣﻦ‬،‫ﻳﺒﺼﻢ ﻫﺬا اﻟﻘﺎﻧــــﻮن ﺑﺨﺎﰎ اﻟﺪوﻟﺔ‬
stamped with the seal of the state, and shall be applied as
.‫ﻗﻮاﻧﻴﻨﻬﺎ‬
one of its laws

٦
 Chapter - 1 ‫اﻟﻔﺼﻞ اﻷول‬
Definitions "‫ﻗﺎﻧﻮن ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ "اﻟﺘﻌﺮﻳﻔﺎت‬

Article 1 ١ ‫اﳌﺎدة‬

In the application of the provisions of this Law, ‫ ﻳﻘﺼﺪ ﺑﺎﻟﻜﻠﻤﺎت واﻟﻌﺒﺎرات‬،‫ﻓـﻲ ﺗﻄﺒﻴﻖ أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
words/expressions have the following meanings: :‫اﻟﺘﺎﻟﻴﺔ اﳌﻌﻨﻰ اﳌﺒﲔ ﻗﺮﻳﻦ ﻛﻞ ﻣﻨﻬﺎ‬

- Personal Data: Any Data related to an identified natural ‫ أي ﺑﻴﺎﻧﺎت ﻣﺘﻌﻠﻘﺔ ﺑﺸﺨﺺ ﻃﺒﻴﻌﻲ‬:‫ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬-
person, or could be identified either directly or indirectly ‫ أو ﳝﻜﻦ ﲢﺪﻳﺪه ﺑﺸﻜﻞ ﻣﺒﺎﺷﺮ أو ﻏﻴﺮ ﻣﺒﺎﺷﺮ ﻋﻦ‬،‫ﻣﺤﺪد‬
by linking this data and any other data such as name, ‫ أو‬،‫ﻃﺮﻳﻖ اﻟﺮﺑﻂ ﺑﲔ ﻫﺬه اﻟﺒﻴﺎﻧﺎت وأي ﺑﻴﺎﻧﺎت أﺧﺮى ﻛﺎﻻﺳﻢ‬
voice, photos, Identification number, online Information ‫ أو ﻣﺤﺪد ﻟﻠﻬﻮﻳﺔ ﻋﺒﺮ‬،‫ أو رﻗﻢ ﺗﻌﺮﻳﻔﻲ‬،‫ أو اﻟﺼﻮرة‬،‫اﻟﺼﻮت‬
Identifiers, or any programs identifying psychological, ،‫ أو أي ﺑﻴـــــﺎﻧﺎت ﲢﺪد اﻟﻬﻮﻳــــــﺔ اﻟﻨﻔﺴﻴـــﺔ‬،‫اﻹﻧﺘﺮﻧـــﺖ‬
genetic, economic, cultural or social identity. .‫ أو اﻻﺟﺘﻤﺎﻋﻴـــــﺔ‬،‫ أو اﻟﺜﻘﺎﻓﻴﺔ‬،‫ أو اﻻﻗﺘﺼﺎدﻳﺔ‬،‫أو اﻟﺼﺤﺔ‬

- Processing: Any electronic or technological process ‫ أي ﻋﻤﻠﻴﺔ إﻟﻜﺘﺮوﻧﻴﺔ أو ﺗﻘﻨﻴﺔ ﻟﻜﺘﺎﺑﺔ اﻟﺒﻴﺎﻧﺎت‬:‫ اﳌﻌﺎﳉﺔ‬-
performed on personal data, where the data is typed, ‫ أو‬،‫ أو ﺣﻔﻈﻬﺎ‬،‫ أو ﺗﺴﺠﻴﻠﻬﺎ‬،‫ أو ﲡﻤﻴﻌﻬﺎ‬،‫اﻟﺸﺨﺼﻴﺔ‬
collected, recorded, saved, stored, merged, sent, received, ‫ أو‬،‫ أو اﺳﺘﻘﺒﺎﻟﻬﺎ‬،‫ أو إرﺳﺎﻟﻬﺎ‬،‫ أو ﻋﺮﺿﻬﺎ‬،‫ أو دﻣﺠﻬﺎ‬،‫ﺗﺨﺰﻳﻨﻬﺎ‬
disseminated, disclosed by transmission, erased, adapted ‫ أو‬،‫ أو ﺗﻌﺪﻳﻠﻬﺎ‬،‫ أو ﺗﻐﻴﻴﺮﻫﺎ‬،‫ أو ﻣﺤﻮﻫﺎ‬،‫ أو ﻧﺸﺮﻫﺎ‬،‫ﺗﺪاوﻟﻬﺎ‬
or altered, retrieved, or analysed, using any intermediary, ‫اﺳﺘﺮﺟﺎﻋﻬﺎ أو ﲢﻠﻴﻠﻬـــــﺎ وذﻟﻚ ﺑﺎﺳـــــﺘﺨﺪام أي وﺳﻴﻂ ﻣﻦ‬
electronic or technical devices, whether partially or ‫اﻟﻮﺳﺎﺋــــﻂ‬
completely. ‫اﻷﺟﻬﺰة اﻹﻟﻜﺘﺮوﻧﻴﺔ أو اﻟﺘﻘﻨﻴﺔ ﺳﻮاء ﰎ ذﻟﻚ ﺟﺰﺋﻴﺎ أو‬.‫ﻛﻠﻴﺎ‬ ‫أو‬

- Sensitive Personal Data: Personal Data that discloses

‫ اﻟﺒﻴﺎﻧﺎت اﻟﺘﻲ ﺗﻔﺼﺢ ﻋﻦ‬:‫ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳊﺴﺎﺳﺔ‬-
the psychological, mental, genetic information, ‫ أو ﺑﻴﺎﻧﺎت‬،‫اﻟﺼﺤﺔ اﻟﻨﻔﺴﻴﺔ أو اﻟﻌﻘﻠﻴﺔ أو اﻟﺒﺪﻧﻴﺔ أو اﳉﻴﻨﻴﺔ‬
biometric data, financial data, religious beliefs, political ‫اﻟﻘﻴﺎﺳﺎت اﳊﻴﻮﻳﺔ "اﻟﺒﻴﻮﻣﺘﺮﻳﺔ" أو اﻟﺒﻴﺎﻧﺎت اﳌﺎﻟﻴﺔ أو‬
opinions, security status. In all cases, data related to ،‫اﳌﻌﺘﻘﺪات اﻟﺪﻳﻨﻴﺔ أو اﻵراء اﻟﺴﻴﺎﺳــــﻴﺔ أو اﳊﺎﻟﺔ اﻷﻣﻨﻴﺔ‬
children is considered sensitive data. ‫وﻓـﻲ ﺟﻤﻴﻊ اﻷﺣﻮال ﺗﻌﺪ ﺑﻴـــــﺎﻧﺎت اﻷﻃﻔﺎل ﻣﻦ اﻟﺒﻴﺎﻧﺎت‬
.‫اﻟﺸﺨﺼﻴـــــــﺔ اﳊﺴﺎﺳﺔ‬
- Data Subject: Any natural person to whom processed
personal data is attributed, and to whom it legally or ‫ أي ﺷﺨﺺ ﻃﺒﻴﻌﻲ ﺗﻨﺴﺐ إﻟﻴﻪ‬:‫ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬-
practically refers to, and can be identifiable. ،‫ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﻣﻌﺎﳉﺔ إﻟﻜﺘﺮوﻧﻴﺎ ﺗﺪل ﻋﻠﻴﻪ ﻗﺎﻧﻮﻧﺎ أو ﻓﻌﻼ‬
.‫وﲤﻜﻦ ﻣﻦ ﲤﻴﻴﺰه ﻋﻦ ﻏﻴﺮه‬
- Data Holder: Any natural or juristic person who is
legally or actually possesses the personal data by any ‫ ﻳﺤــﻮز وﻳﺤﺘﻔﻆ‬،‫ أي ﺷﺨﺺ ﻃﺒﻴﻌﻲ أو اﻋﺘﺒﺎري‬:‫ اﳊﺎﺋﺰ‬-
form, through any means of possession whether or not ‫ﻗﺎﻧﻮﻧـــــﻴﺎ أو ﻓﻌﻠﻴﺎ ﺑﺒﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﻓـﻲ أي ﺻﻮرة ﻣﻦ‬
this person is the creator of the data, or gained its ‫ أو ﻋﻠﻰ أي وﺳﻴﻠﺔ ﺗﺨــــﺰﻳﻦ ﺳﻮاء أﻛﺎن ﻫﻮ اﳌﻨﺸﺊ‬،‫اﻟﺼـــﻮر‬
possession by any means. .‫ أم اﻧﺘﻘﻠﺖ إﻟﻴﻪ ﺣﻴﺎزﺗﻬﺎ ﺑﺄي ﺻﻮرة‬،‫ﻟﻠﺒﻴﺎﻧﺎت‬

٧
 Follow Article 1 ١ ‫ﺗﺎﺑﻊ اﳌﺎدة‬

- Data Controller: Any natural or juristic person, public ‫ أي ﺷﺨﺺ ﻃﺒﻴﻌﻲ أو اﻋﺘﺒﺎري ﻳﻜﻮن ﻟﻪ ﺑﺤﻜــــــــﻢ‬:‫ اﳌﺘﺤﻜﻢ‬-
authority, agency or other body which, alone or jointly ‫ اﳊﻖ ﻓـﻲ اﳊﺼﻮل ﻋﻠﻰ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬،‫أو ﻃﺒﻴﻌﺔ ﻋﻤﻠﻪ‬
with others, determines the purposes and means of ‫ أو ﻣﻌﺎﳉﺘﻬﺎ‬،‫وﲢﺪﻳﺪ ﻃﺮﻳﻘﺔ وأﺳﻠﻮب وﻣﻌﺎﻳﻴﺮ اﻻﺣﺘﻔﺎظ ﺑﻬﺎ‬
processing the personal data. .‫واﻟﺘﺤﻜﻢ ﻓﻴﻬﺎ ﻃﺒﻘﺎ ﻟﻠﻐﺮض اﶈﺪد أو ﻧﺸﺎﻃﻪ‬

- Data Processor: Any natural or juristic person, public ‫ أي ﺷﺨﺺ ﻃﺒﻴﻌﻲ أو اﻋﺘﺒﺎري ﻣﺨﺘﺺ ﺑﻄﺒﻴﻌﺔ‬:‫اﳌﻌﺎﻟﺞ‬-
authority, agency or other body which, by nature of their ‫ ﲟﻌﺎﳉﺔ اﻟﺒﻴـــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺼﺎﳊﻪ أو ﻟﺼﺎﻟﺢ‬،‫ﻋﻤﻠﻪ‬
competences, processes personal data for his own or for .‫اﳌﺘﺤﻜﻢ ﺑﺎﻻﺗﻔﺎق ﻣﻌﻪ ووﻓﻘﺎ ﻟﺘﻌﻠﻴﻤﺎﺗﻪ‬
by agreement and in accordance with his instructions. ‫ ﻛﻞ وﺳﻴﻠﺔ ﲢﻘﻖ اﺗﺼﺎل ﻋﻠﻢ‬:‫ إﺗﺎﺣﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬-
‫اﻟﻐﻴﺮ ﺑﺎﻟﺒﻴــــــــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻛﺎﻻﻃﻼع أو اﻟﺘﺪاول أو اﻟﻨﺸﺮ‬
- Personal Data Availability: Any means used to
‫أو اﻟﻨﻘﻞ أو اﻻﺳﺘﺨﺪام أو اﻟﻌﺮض أو اﻹرﺳﺎل أو اﻻﺳﺘﻘﺒﺎل‬
communicate personal data to a third party by
.‫أو اﻹﻓﺼﺎح ﻋﻨﻬﺎ‬
circulation, publication, transfer, use, display,
transmission or reception,. ‫ إﺟﺮاءات وﻋﻤﻠﻴﺎت ﺗﻘﻨﻴﺔ وﺗﻨﻈﻴﻤﻴﺔ ﻣﻦ‬:‫ أﻣﻦ اﻟﺒﻴﺎﻧﺎت‬-
‫ﺷﺄﻧﻬﺎ اﳊﻔﺎظ ﻋﻠﻰ ﺧﺼﻮﺻﻴﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﺳﺮﻳﺘﻬﺎ‬
- Data Security: Technical and regulatory procedures .‫وﺳﻼﻣﺘﻬﺎ ووﺣﺪﺗﻬﺎ وﺗﻜﺎﻣﻠﻬﺎ ﻓﻴﻤﺎ ﺑﻴﻨﻬﺎ‬
adopted to ensure the privacy, secrecy, safety, uniformity,
‫ ﻛﻞ دﺧﻮل ﻏﻴﺮ ﻣﺮﺧﺺ‬:‫ ﺧﺮق واﻧﺘﻬﺎك اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬-
and unification of personal data
‫ أو أي‬،‫ﺑﻪ إﻟﻰ ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ أو وﺻﻮل ﻏﻴﺮ ﻣﺸﺮوع ﻟﻬﺎ‬
- Data Violation and Breach: Every unauthorised or ‫ﻋﻤﻠﻴﺔ ﻏﻴﺮ ﻣﺸــــــﺮوﻋﺔ ﻟﻨﺴﺦ أو إرﺳــــﺎل أو ﺗﻮزﻳﻊ أو ﺗﺒــــﺎدل‬
illegal access, processing, copying, sending, distribution, ‫أو ﻧﻘﻞ أو ﺗﺪاول ﻳﻬﺪف إﻟﻰ اﻟﻜﺸﻒ أو اﻹﻓﺼﺎح ﻋﻦ اﻟﺒﻴﺎﻧﺎت‬
exchanging, transfer, or circulation of personal data that ‫اﻟﺸﺨﺼـﻴﺔ أو إﺗﻼﻓﻬﺎ أو ﺗﻌﺪﻳﻠﻬــــــﺎ أﺛﻨﺎء ﺗﺨﺰﻳﻨﻬـــــــﺎ أو ﻧﻘﻠﻬﺎ‬
aims to disclose, destroy or modify personal data during .‫أو ﻣﻌﺎﳉﺘﻬﺎ‬
its storage, Transportation or processing.
‫ ﻧﻘﻞ اﻟﺒﻴﺎﻧﺎت‬:‫ ﺣﺮﻛﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻋﺒﺮ اﳊﺪود‬-
- Cross border data flows: The movement of subject data ‫أو إﺗﺎﺣﺘﻬــــــﺎ أو ﺗﺴﺠﻴﻠﻬﺎ أو ﺗﺨﺰﻳﻨﻬﺎ أو ﺗﺪاوﻟﻬـــــــﺎ أو ﻧﺸﺮﻫﺎ‬
or its transfer , availability , recording, storage, display, ‫أو اﺳــــﺘﺨﺪاﻣﻬﺎ أو ﻋﺮﺿــــــــﻬﺎ أو إرﺳـــــــﺎﻟﻬﺎ أو اﺳﺘﻘﺒﺎﻟﻬـــــــﺎ‬
sending, receiving, retrieving, or processing it from inside ‫ ﻣﻦ داﺧﻞ اﻟﻨﻄﺎق اﳉﻐﺮاﻓـﻲ‬،‫أو اﺳﺘﺮﺟﺎﻋﻬﺎ أو ﻣﻌﺎﳉﺘﻬﺎ‬
the Egyptian territory to outside it, and vice versa. .‫ﳉﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ إﻟﻰ ﺧﺎرﺟﻪ أو اﻟﻌﻜﺲ‬
‫ إرﺳﺎل أي رﺳﺎﻟﺔ أو ﺑﻴﺎن أو ﻣﺤﺘﻮى‬:‫ اﻟﺘﺴﻮﻳﻖ اﻹﻟﻜﺘﺮوﻧﻲ‬-
- Digital Marketing: Sending any message, statement,
‫إﻋﻼﻧﻲ أو ﺗﺴـــﻮﻳﻘﻲ ﺑﺄي وﺳـــــــﻴﻠﺔ ﺗﻘﻨﻴﺔ أﻳﺎ ﻛﺎﻧﺖ ﻃﺒﻴﻌﺘﻬـــــﺎ‬
advertising or marketing content by any technical means,
‫أو ﺻﻮرﺗﻬﺎ ﺗﺴﺘﻬﺪف ﺑﺸﻜﻞ ﻣﺒﺎﺷﺮ أو ﻏﻴﺮ ﻣﺒﺎﺷﺮ ﺗﺮوﻳﺞ ﺳﻠﻊ‬
regardless of its nature or image, directly or indirectly
‫أو ﺧﺪﻣـــــﺎت أو اﻟﺘﻤﺎﺳﺎت أو ﻃﻠﺒﺎت ﲡــــــﺎرﻳﺔ أو ﺳﻴﺎﺳـــــﻴﺔ‬
targeting the promotion of goods, services, petitions,
.‫أو اﺟﺘﻤﺎﻋﻴﺔ أو ﺧﻴﺮﻳﺔ ﻣﻮﺟﻬﺔ إﻟﻰ أﺷﺨﺎص ﺑﻌﻴﻨﻬﻢ‬
commercial, political, or social requests or expertise
directed to specific people. ‫ رﺋﺎﺳﺔ اﳉﻤﻬـــــــﻮرﻳﺔ ووزارة اﻟﺪﻓﺎع‬:‫ ﺟﻬﺎت اﻷﻣﻦ اﻟﻘﻮﻣﻲ‬-

٨
 Follow Article 1 ١ ‫ﺗﺎﺑﻊ اﳌﺎدة‬

- National Security Authorities: Presidency of the ‫ووزارة اﻟﺪاﺧﻠﻴﺔ وﺟﻬﺎز اﳌﺨﺎﺑﺮات اﻟﻌﺎﻣﺔ وﻫﻴﺌﺔ اﻟﺮﻗﺎﺑﺔ‬
Republic, Ministry of Defence, Ministry of Interior, .‫اﻹدارﻳﺔ‬
General Intelligence Agency, and the Administrative
Control Authority. .‫ ﻣﺮﻛﺰ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬:‫ اﳌﺮﻛﺰ‬-
- The Centre : Personal Data Protection Centre
‫ وﺛﻴﻘﺔ رﺳﻤﻴﺔ ﺗﺼﺪر ﻋﻦ اﳌﺮﻛﺰ ﻟﻠﺸﺨﺺ‬:‫ اﻟﺘﺮﺧﻴﺺ‬-
- License: An official document issued by the Centre to
‫اﻻﻋﺘﺒﺎري ﲤﻨﺤﻪ ﻣﻦ ﺧﻼﻟﻬﺎ اﳊﻖ ﻓـﻲ ﻣﺰاوﻟﺔ ﻧﺸﺎط ﺟﻤﻊ‬
the legal person by which it grants the right to engage in
the activity of electronic personal data, storing, ‫اﻟﺒﻴــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻹﻟﻜﺘﺮوﻧﻴـــﺔ أو ﺗﺨﺰﻳﻨﻬـــﺎ أو ﻧﻘﻠﻬــﺎ‬
transferring or processing data, carrying out digital ‫أو ﻣﻌﺎﳉﺘﻬﺎ أو اﻟﻘﻴﺎم ﺑﺄﻧﺸﻄﺔ اﻟﺘﺴﻮﻳﻖ اﻹﻟﻜﺘﺮوﻧﻲ أو ﻛﻞ ﻣﺎ‬
marketing activities or all of the above and dealing with ‫ وﲢﺪد اﻟﺘﺰاﻣﺎت اﳌﺮﺧﺺ‬،‫ﺳﺒﻖ واﻟﺘﻌﺎﻣﻞ ﻋﻠﻴﻬﺎ ﺑﺄي ﺻﻮرة‬
with the data in any way, and specifying the obligations of ‫ﻟﻪ وﻓﻖ اﻟﻘﻮاﻋﺪ واﻟﺸﺮوط واﻹﺟﺮاءات واﳌﻌﺎﻳﻴﺮ اﻟﻔﻨﻴﺔ‬
the licensee according to the specific rules, conditions,
‫ وذﻟﻚ ﳌﺪة ﺛﻼث‬،‫اﶈﺪدة ﺑﺎﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن‬
procedures and technical standards. In the executive
.‫ﺳﻨﻮات ﻗﺎﺑﻠﺔ ﻟﻠﺘﺠﺪﻳﺪ ﳌﺪد أﺧﺮى‬
regulation of this law for a period of no more than three
years liable for renewable for other periods.
‫ وﺛﻴﻘﺔ رﺳﻤﻴﺔ ﺗﺼﺪر ﻋﻦ اﳌﺮﻛﺰ ﻟﻠﺸﺨﺺ‬:‫ اﻟﺘﺼﺮﻳﺢ‬-
- Permit: An official document issued by the Centre to ‫اﻟﻄﺒﻴﻌﻲ أو اﻻﻋﺘﺒﺎري ﲤﻨﺤﻪ ﻣﻦ ﺧﻼﻟﻬﺎ اﳊﻖ ﻓـﻲ‬
the natural or juristic person by which it grants the right
‫ﳑﺎرﺳـــــــﺔ ﻧﺸﺎط ﺟﻤﻊ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻹﻟﻜﺘﺮوﻧﻴــــــﺔ‬
to practice the activity of collecting personal electronic
‫أو ﺗﺨﺰﻳﻨﻬــــﺎ أو ﻧﻘﻠﻬﺎ أو ﻣﻌﺎﳉﺘﻬﺎ أو اﻟﻘﻴﺎم ﺑﺄﻧﺸـــــــﻄﺔ‬
data, storing, transferring or processing, carrying out
digital marketing activities or all of the above and dealing ‫اﻟﺘﺴﻮﻳﻖ اﻹﻟﻜﺘﺮوﻧﻲ أو ﻛﻞ ﻣﺎ ﺳﺒﻖ واﻟﺘﻌﺎﻣﻞ ﻋﻠﻴﻬﺎ ﺑﺄي‬
with the in any way, to perform a specific task or tasks ‫ وﲢﺪد ﻫﺬه اﻟﻮﺛﻴﻘﺔ‬،‫ أو ﻷداء ﻣﻬﻤﺔ أو ﻣﻬﺎم ﻣﻌﻴﻨﺔ‬،‫ﺻﻮرة‬
This document sets forth the obligations of the authorised ‫اﻟﺘﺰاﻣﺎت اﳌﺼﺮح ﻟﻪ وﻓﻖ اﻟﻘﻮاﻋﺪ واﻟﺸﺮوط واﻹﺟﺮاءات‬
person according to the rules, conditions, procedures and ‫ ﳌﺪة ﻣﺆﻗﺘﺔ ﻻ‬،‫واﳌﻌﺎﻳﻴﺮ اﻟﻔﻨﻴﺔ اﶈﺪدة ﺑﺎﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ‬
technical standards set forth in the executive regulation,
.‫ وﻳﺠﻮز ﲡﺪﻳﺪﻫﺎ ﻷﻛﺜﺮ ﻣﻦ ﻣﺪة‬،‫ﲡﺎوز ﺳﻨﺔ‬
for a temporary period not exceeding one year, and it
may be renewed for more than a period.
‫ ﺷﻬﺎدة ﺗﺼﺪر ﻋﻦ اﳌﺮﻛﺰ ﺗﻔﻴﺪ أن اﻟﺸﺨﺺ‬:‫ اﻻﻋﺘﻤﺎد‬-
-accreditation: a certificate issued by the Centre stating ‫اﻟﻄﺒﻴﻌﻲ أو اﻻﻋﺘﺒﺎري ﻗﺪ اﺳﺘﻮﻓﻰ ﺟﻤﻴﻊ اﳌﺘﻄﻠﺒﺎت اﻟﻔﻨﻴﺔ‬
that the natural or legal person has fulfilled all the ‫واﻟﻘﺎﻧﻮﻧﻴﺔ واﻟﺘﻨﻈﻴﻤﻴﺔ اﶈﺪدة ﺑﺎﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا‬
technical, legal and organisational requirements specified
‫اﻟﻘﺎﻧﻮن وﻳﻜﻮن ﲟﻮﺟﺒﻬﺎ ﻣﺆﻫﻼ ﻟﺘﻘﺪﱘ اﻻﺳﺘﺸﺎرات ﻓـﻲ‬
in the executive regulation of this law He will be eligible
.‫ﻣﺠﺎل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
to provide advice in the scope of personal data
protection.
‫ اﻟﻮزﻳﺮ اﳌﻌﻨﻲ ﺑﺸﺌﻮن اﻻﺗﺼــــــﺎﻻت‬:‫ اﻟﻮزﻳﺮ اﳌﺨﺘﺺ‬-
- Concerned Minister: Minister of Telecommunications .‫وﺗﻜﻨﻮﻟﻮﺟﻴﺎ اﳌﻌﻠﻮﻣـــــﺎت‬
and Information Technology.

٩
 Chapter - 2 ‫اﻟﻔﺼﻞ اﻟﺜﺎﻧﻲ‬
Personal Data Protection Law
‫ﻗﺎﻧﻮن ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
The Rights of Data Subject and the Conditions
"‫"ﺣﻘﻮق اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت وﺷﺮوط ﺟﻤﻊ وﻣﻌﺎﳉﺔ اﻟﺒﻴﺎﻧﺎت‬
of Data Collection and Processing

Article 2 ٢ ‫اﳌﺎدة‬
Collecting, processing, or disclosing personal data by any ‫ﻻ ﻳﺠﻮز ﺟﻤﻊ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﻣﻌﺎﳉﺘﻬﺎ أو اﻹﻓﺼﺎح‬
means is forbidden, unless the data subject explicitly ‫ﻋﻨﻬـــــﺎ أو إﻓﺸﺎﺋﻬﺎ ﺑﺄي وﺳﻴﻠﺔ ﻣﻦ اﻟﻮﺳﺎﺋﻞ إﻻ ﲟﻮاﻓﻘﺔ‬
gives the processor the consent, or in the circumstances ‫ أو ﻓـﻲ اﻷﺣﻮال‬،‫ﺻﺮﻳﺤﺔ ﻣﻦ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
authorized by law. .‫اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
the data subject shall have the following rights: :‫وﻳﻜﻮن ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت اﳊﻘﻮق اﻵﺗﻴﺔ‬
1. To be aware that his personal data is in the custody of ‫ اﻟﻌﻠﻢ ﺑﺎﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳋﺎﺻﺔ ﺑﻪ اﳌﻮﺟﻮدة ﻟﺪى‬.١
any processor/controller/ and shall have the right to view, ‫أي ﺣﺎﺋﺰ أو ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ واﻻﻃﻼع ﻋﻠﻴﻬﺎ واﻟﻮﺻﻮل‬
reach, or obtain it. .‫إﻟﻴﻬﺎ أو اﳊﺼﻮل ﻋﻠﻴﻬﺎ‬
2. To withdraw his consent regarding the storage of ‫ اﻟﻌﺪول ﻋﻦ اﳌﻮاﻓﻘﺔ اﳌﺴﺒﻘﺔ ﻋﻠﻰ اﻻﺣﺘﻔﺎظ ﺑﺒﻴﺎﻧﺎﺗﻪ‬.٢
processing of the personal data. .‫اﻟﺸﺨﺼﻴﺔ أو ﻣﻌﺎﳉﺘﻬﺎ‬
3. Rectifying, amending, deleting, or updating the ‫ اﻟﺘﺼﺤﻴﺢ أو اﻟﺘﻌﺪﻳﻞ أو اﶈﻮ أو اﻹﺿﺎﻓﺔ أو اﻟﺘﺤﺪﻳﺚ‬.٣
.‫ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
Personal Data
.‫ ﺗﺨﺼﻴﺺ اﳌﻌﺎﳉﺔ ﻓـﻲ ﻧﻄﺎق ﻣﺤﺪد‬.٤
4. Restricting data processing to a specific scope
.‫ اﻟﻌﻠﻢ واﳌﻌﺮﻓﺔ ﺑﺄي ﺧﺮق أو اﻧﺘﻬﺎك ﻟﺒﻴﺎﻧﺎﺗﻪ اﻟﺸﺨﺼﻴﺔ‬.٥
5. Awareness of any violation to his personal data
‫ اﻻﻋﺘﺮاض ﻋﻠﻰ ﻣﻌﺎﳉﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﻧﺘﺎﺋﺠﻬﺎ‬.٦
6. Objecting the processing of his personal data whenever
‫ﻣﺘﻰ ﺗﻌﺎرﺿﺖ ﻣﻊ اﳊﻘﻮق واﳊﺮﻳﺎت اﻷﺳﺎﺳﻴﺔ ﻟﻠﺸﺨﺺ‬
it violates the basic rights and freedoms of data subject. .‫اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
With Exception to provision 5, data subject is required to ‫ ﻳﺆدي اﻟﺸﺨﺺ‬،‫( ﻣﻦ اﻟﻔﻘﺮة اﻟﺴﺎﺑﻘﺔ‬٥) ‫وﺑﺎﺳﺘﺜﻨﺎء اﻟﺒﻨﺪ‬
pay against the service provided to the processor in ‫اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻣﻘﺎﺑﻞ ﺗﻜﻠﻔﺔ اﳋﺪﻣﺔ اﳌﻘﺪﻣﺔ إﻟﻴﻪ ﻣﻦ‬
relation to enjoying his rights. The ‘Centre ’ shall issue the ‫ وﻳﺘﻮﻟﻰ‬،‫اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﻓﻴﻤﺎ ﻳﺨﺺ ﳑﺎرﺳﺘﻪ ﳊﻘﻮﻗﻪ‬
decisions the determine the cost provided it shall not ‫اﳌﺮﻛﺰ إﺻﺪار ﻗﺮارات ﲢﺪﻳﺪ ﻫﺬا اﳌﻘﺎﺑﻞ ﲟﺎ ﻻ ﻳﺠﺎوز‬
exceed Twenty Thousand Egyptian Pounds. .‫ﻋﺸﺮﻳﻦ أﻟﻒ ﺟﻨﻴﻪ‬

Article 3 ٣ ‫اﳌﺎدة‬
The following conditions must be fulfilled in order to ،‫ﻳﺠﺐ ﳉﻤﻊ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﻣﻌﺎﳉﺘﻬﺎ واﻻﺣﺘﻔﺎظ ﺑﻬﺎ‬
collect, process, or store personal data: :‫ﺗﻮاﻓﺮ اﻟﺸﺮوط اﻵﺗﻴﺔ‬
1. Collection of dataFirst
mustArticle
be for specified and declared ‫ أن ﲡﻤﻊ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻷﻏﺮاض ﻣﺸﺮوﻋﺔ‬.١
legitimate purposes. .‫وﻣﺤﺪدة وﻣﻌﻠﻨﺔ ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ‬
2. Data must be complete, accurate and secured. .‫ أن ﺗﻜﻮن ﺻﺤﻴﺤﺔ وﺳﻠﻴﻤﺔ وﻣﺆﻣﻨﺔ‬.٢
3. Data must be processed by legitimate and convenient ‫ أن ﺗﻌﺎﻟﺞ ﺑﻄﺮﻳﻘﺔ ﻣﺸﺮوﻋﺔ وﻣﻼﺋﻤﺔ ﻟﻸﻏﺮاض اﻟﺘﻲ ﰎ‬.٣
to the purposed to which the data is collected. .‫ﲡﻤﻴﻌﻬﺎ ﻣﻦ أﺟﻠﻬﺎ‬
4. Data shall not be retained for a period longer than the ‫ أﻻ ﻳﺘﻢ اﻻﺣﺘﻔﺎظ ﺑﻬﺎ ﳌﺪة أﻃﻮل ﻣﻦ اﳌﺪة اﻟﻼزﻣﺔ ﻟﻠﻮﻓﺎء‬.٤
.‫ﺑﺎﻟﻐﺮض اﶈﺪد ﻟﻬﺎ‬
period necessary to meet its intended purpose.
‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳــــــﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻟﺴﻴﺎﺳـــــﺎت‬
The Executive regulation shall determine the policies and
‫واﻹﺟﺮاءات واﻟﻀﻮاﺑﻂ واﳌﻌﺎﻳﻴﺮ اﻟﻘﻴﺎﺳﻴﺔ ﻟﻠﺠﻤﻊ واﳌﻌﺎﳉﺔ‬
procedures for collection, processing, storing, and .‫واﳊﻔﻆ واﻟﺘﺄﻣﲔ ﻟﻬﺬه اﻟﺒﻴﺎﻧﺎت‬
securing this data.

١٠
 Chapter - 3 ‫اﻟﻔﺼﻞ اﻟﺜﺎﻟﺚ‬
Obligations of Controller and Processor "‫"اﻟﺘﺰاﻣﺎت اﳌﺘﺤﻜﻢ واﳌﻌﺎﻟﺞ‬

First: Obligations of Controllers ‫أوﻻ – اﻟﺘﺰاﻣﺎت اﳌﺘﺤﻜﻢ‬

Article 4 ٤ ‫اﳌﺎدة‬

Without prejudice to Article 12 of this law, data controller ‫ ﻳﻠﺘﺰم‬،‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬١٢) ‫ﻣﻊ ﻣﺮاﻋﺎة أﺣﻜﺎم اﳌﺎدة‬
is committed to: :‫اﳌﺘﺤﻜﻢ ﲟﺎ ﻳﺄﺗﻲ‬

‫ اﳊﺼﻮل ﻋﻠﻰ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﺗﻠﻘﻴﻬﺎ ﻣﻦ اﳊﺎﺋﺰ‬.١

1. Obtain or receive personal data from the processor or
‫أو ﻣﻦ اﳉﻬﺎت اﳌﺨﺘﺼﺔ ﺑﺘﺪوﻳﻨﻪ ﺑﻬﺎ ﺑﺤﺴﺐ اﻷﺣﻮال ﺑﻌﺪ‬
from concerned authorities, as appropriate, following the ‫ أو ﻓـﻲ اﻷﺣﻮال اﳌﺼﺮح‬،‫ﻣﻮاﻓﻘﺔ اﻟﺸﺨﺺ اﳌﻌﻨﻰ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
consent of the concerned person, or in the legally .‫ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
authorized circumstances
2. Ensure that personal data is correct, consistent, and ‫ اﻟﺘﺄﻛﺪ ﻣﻦ ﺻﺤﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ واﺗﻔﺎﻗﻬﺎ وﻛﻔﺎﻳﺘﻬﺎ‬.٢
.‫ﻣﻊ اﻟﻐﺮض اﶈﺪد ﳉﻤﻌﻬﺎ‬
adequate for the intended purpose.
3. Develop a method and criteria for processing according ‫ وﺿﻊ ﻃﺮﻳﻘﺔ وأﺳﻠﻮب وﻣﻌﺎﻳﻴﺮ اﳌﻌﺎﳉﺔ ﻃﺒﻘﺎ ﻟﻠﻐﺮض‬.٣
to the specified purpose, unless otherwise the processor is ‫ ﻣﺎ ﻟﻢ ﻳﻘﺮر ﺗﻔﻮﻳﺾ اﳌﻌﺎﻟﺞ ﻓـﻲ ذﻟﻚ ﲟﻮﺟﺐ ﺗﻌﺎﻗﺪ‬،‫اﶈﺪد‬
authorized by a written contract. .‫ﻣﻜﺘﻮب‬
4. Ensure that the specified purpose for personal data
‫ اﻟﺘﺄﻛﺪ ﻣﻦ اﻧﻄﺒﺎق اﻟﻐﺮض اﶈﺪد ﻣﻦ ﺟﻤﻊ اﻟﺒﻴﺎﻧﺎت‬.٤
collection is in compliance with the purposes of its
.‫اﻟﺸﺨﺼﻴﺔ ﻷﻏﺮاض ﻣﻌﺎﳉﺘﻬﺎ‬
processing.
5. Perform or refrain from taking an action that makes the ‫ اﻟﻘﻴﺎم ﺑﻌﻤﻞ أو اﻻﻣﺘﻨﺎع ﻋﻦ ﻋﻤﻞ ﻳﻜﻮن ﻣﻦ ﺷﺄﻧﻪ إﺗﺎﺣﺔ‬.٥
data available, except in the cases set forth in the law. .‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ إﻻ ﻓـﻲ اﻷﺣﻮال اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
6. Take all technical and organisational measures, apply
‫ اﺗﺨﺎذ ﺟﻤﻴﻊ اﻹﺟﺮاءات اﻟﺘﻘﻨﻴﺔ واﻟﺘﻨﻈﻴﻤﻴﺔ وﺗﻄﺒﻴﻖ‬.٦
the standard measures needed for data protection, and
‫اﳌﻌﺎﻳﻴﺮ اﻟﻘﻴﺎﺳﻴﺔ اﻟﻼزﻣﺔ ﳊﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
ensure its secrecy and protection against any breach, ‫ وﻋﺪم اﺧﺘﺮاﻗﻬﺎ أو إﺗﻼﻓﻬﺎ‬،‫وﺗﺄﻣﻴﻨﻬﺎ ﺣﻔﺎﻇﺎ ﻋﻠﻰ ﺳﺮﻳﺘﻬﺎ‬
destruction, change, or tampering for any illegal action. .‫أو ﺗﻐﻴﻴﺮﻫﺎ أو اﻟﻌﺒﺚ ﺑﻬﺎ ﻗﺒﻞ أي إﺟﺮاء ﻏﻴﺮ ﻣﺸﺮوع‬
7. Delete the personal data immediately after the
completion of its purpose, and in case it is retained, for ‫ ﻣﺤﻮ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ ﻓﻮر اﻧﻘﻀﺎء اﻟﻐﺮض‬.٧
‫ أﻣﺎ ﻓـﻲ ﺣﺎل اﻻﺣﺘﻔﺎظ ﺑﻬﺎ ﻷي ﺳﺒﺐ ﻣﻦ‬،‫اﶈﺪد ﻣﻨﻬﺎ‬
any legitimate reason, it shall not remain in a form that
‫ ﻓﻴﺠﺐ أﻻ ﺗﺒﻘﻰ ﻓـﻲ‬،‫اﻷﺳﺒﺎب اﳌﺸﺮوﻋﺔ ﺑﻌﺪ اﻧﺘﻬﺎء اﻟﻐﺮض‬
makes the data subject identifiable. .‫ﺻﻮرة ﺗﺴﻤﺢ ﺑﺘﺤﺪﻳﺪ اﻟﺸﺨﺺ اﳌﻌﻨﻰ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
8. Rectify any faultFirst
in the Article
personal data as soon as it is
discovered or are notified. ‫ ﺗﺼﺤﻴﺢ أي ﺧﻄﺄ ﺑﺎﻟﺒﻴـــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻓﻮر إﺑﻼﻏـــــﻪ‬.٨
9. Keep a special record of data, which includes a .‫أو ﻋﻠﻤﻪ ﺑﻪ‬
description of the categories of obtained personal data
and determining the concerned person to disclose, its ‫ ﻋﻠﻰ أن ﻳﺘﻀﻤﻦ وﺻﻒ‬،‫ إﻣﺴﺎك ﺳﺠﻞ ﺧﺎص ﻟﻠﺒﻴﺎﻧﺎت‬.٩
‫ وﲢﺪﻳﺪ ﻣﻦ ﺳﻴﻔﺼﺢ ﻟﻬﻢ‬،‫ﻓﺌﺎت اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ‬
documentation, time periods, restrictions, scope,
‫ﻋﻦ ﻫﺬه اﻟﺒﻴﺎﻧﺎت أو ﻳﺘﻴﺤﻬﺎ ﻟﻬﻢ وﺳﻨﺪه واﳌﺪد اﻟﺰﻣﻨﻴﺔ‬
mechanisms for deletion or amendment of personal data, ‫وﻗﻴﻮدﻫﺎ وﻧﻄﺎﻗﻬﺎ وآﻟﻴﺎت ﻣﺤﻮ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴــــﺔ ﻟﺪﻳﻪ‬
and any other data related to the transboundary ‫أو ﺗﻌﺪﻳﻠﻬﺎ وأي ﺑﻴﺎﻧﺎت أﺧﺮى ﻣﺘﻌﻠﻘﺔ ﺑﻨﻘﻞ ﺗﻠﻚ اﻟﺒﻴﺎﻧﺎن‬
movement of this personal data and a description of ‫اﻟﺸﺨﺼﻴــــــﺔ ﻋﺒﺮ اﳊﺪود ووﺻﻒ اﻹﺟــــــــﺮاءات اﻟﺘﻘﻨﻴﺔ‬
technical and organizational procedures of data security. .‫واﻟﺘﻨﻈﻴﻤﻴﺔ اﳋﺎﺻﺔ ﺑﺄﻣﻦ اﻟﺒﻴﺎﻧﺎت‬

١١
 Follow Article 4 ٤ ‫ﺗﺎﺑﻊ اﳌﺎدة‬

10. Obtain a license or permit from the Centre to deal ‫ اﳊﺼﻮل ﻋﻠﻰ ﺗﺮﺧﻴﺺ أو ﺗﺼﺮﻳﺢ ﻣﻦ اﳌﺮﻛﺰ ﻟﻠﺘﻌﺎﻣﻞ‬.١٠
with personal data. .‫ﻣﻊ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
11. The controller outside the Egyptian territories is
‫ ﻳﻠﺘﺰم اﳌﺘﺤﻜﻢ ﺧﺎرج ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ ﺑﺘﻌﻴﲔ‬.١١
responsible for appointing a representative in Egypt in
‫ﳑﺜﻞ ﻟﻪ ﻓـﻲ ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ وذﻟﻚ ﻋﻠﻰ اﻟﻨﺤﻮ‬
the manner specified by the executive regulation.
.‫اﻟﺬي ﺗﺒﻴﻨﻪ اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ‬
12. Provide the required technologies to comply with the
‫ ﺗﻮﻓﻴﺮ اﻹﻣﻜﺎﻧﻴﺎت اﻟﻼزﻣﺔ ﻹﺛﺒﺎت اﻟﺘﺰاﻣﻪ ﺑﺘﻄﺒﻴﻖ‬.١٢
provisions of the present law, and enable the Centre to
‫أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن وﲤﻜﲔ اﳌﺮﻛﺰ ﻣﻦ اﻟﺘﻔﺘﻴﺶ واﻟﺮﻗﺎﺑﺔ‬
investigate and inspect to ensure the compliance.
.‫ﻟﻠﺘﺄﻛﺪ ﻣﻦ ذﻟﻚ‬
And in case of several controllers, every one of them is
responsible for all the aforementioned responsibilities of ‫وﻓﻰ ﺣﺎل وﺟﻮد أﻛﺜﺮ ﻣﻦ ﻣﺘﺤﻜﻢ ﻳﻠﺘﺰم ﻛﻞ ﻣﻨﻬﻢ ﺑﺠﻤﻴﻊ‬
this law, and the concerned person can enjoy his rights ‫ وﻟﻠﺸﺨﺺ‬،‫اﻻﻟﺘﺰاﻣﺎت اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
vis-à-vis every controller separately. The implementing .‫اﳌﻌﻨﻰ ﳑﺎرﺳــــﺔ ﺣﻘﻮﻗﻪ ﲡﺎه ﻛﻞ ﻣﺘﺤﻜﻢ ﻋﻠﻰ ﺣﺪة‬
regulation of the Act sets out the policies, procedures, ‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻟﺴﻴﺎﺳـــــﺎت‬
controls and technical standards for such obligations. .‫واﻹﺟﺮاءات واﻟﻀﻮاﺑﻂ واﳌﻌﺎﻳﻴﺮ اﻟﻔﻨﻴﺔ ﻟﺘﻠﻚ اﻻﻟﺘﺰاﻣﺎت‬

Second: Processor’s Obligations ‫ﺛﺎﻧﻴﺎ – اﻟﺘﺰاﻣﺎت اﳌﻌﺎﻟﺞ‬

Article 5 ٥ ‫اﳌﺎدة‬

Without prejudice to Article 12 of the present law, ‫ ﻳﻠﺘﺰم ﻣﻌﺎﻟﺞ‬،‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬١٢) ‫ﻣﻊ ﻣﺮاﻋﺎة أﺣﻜﺎم اﳌﺎدة‬
Personal Data Processor is committed to: :‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﲟﺎ ﻳﺄﺗﻲ‬
1. Conduct and implement the processing in accordance
‫ إﺟﺮاء اﳌﻌﺎﳉﺔ وﺗﻨﻔﻴﺬﻫﺎ ﻃﺒﻘﺎ ﻟﻠﻘﻮاﻋﺪ اﳌﻨﻈﻤﺔ ﻟﺬﻟﻚ‬.١
with the governing rules in the present law and in
‫ﺑﻬﺬا اﻟﻘﺎﻧﻮن وﻻﺋﺤﺘﻪ اﻟﺘﻨﻔﻴﺬﻳﺔ ووﻓﻘﺎ ﻟﻠﺤﺎﻻت اﳌﺸﺮوﻋﺔ‬
accordance with the legitimate and legal cases, based on
‫واﻟﻘﺎﻧﻮﻧﻴﺔ وﺑﻨﺎء ﻋﻠﻰ اﻟﺘﻌﻠﻴﻤﺎت اﳌﻜﺘﻮﺑﺔ اﻟﻮاردة إﻟﻴﻪ ﻣﻦ‬
the written instructions from the Centre , the controller,
،‫اﳌﺮﻛﺰ أو اﳌﺘﺤﻜﻢ أو ﻣﻦ أي ذي ﺻﻔﺔ ﺑﺤﺴﺐ اﻷﺣﻮال‬
or from any relevant person, according to the
circumstances, in particular with regard to the scope, ‫وﺑﺼﻔﺔ ﺧﺎﺻﺔ ﻓﻴﻤﺎ ﻳﺘﻌﻠﻖ ﺑﻨﻄﺎق ﻋﻤﻠﻴﺔ اﳌﻌﺎﳉﺔ‬
subject, nature, type of personal data, its agreement and ‫وﻣﻮﺿﻮﻋﻬﺎ وﻃﺒﻴﻌﺘﻬﺎ وﻧﻮع اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ واﺗﻔﺎﻗﻬﺎ‬
adequacy with the specified purpose for it. .‫وﻛﻔﺎﻳﺘﻬﺎ ﻣﻊ اﻟﻐﺮض اﶈﺪد ﻟﻪ‬
2. The purposes and practice of processing are legitimate ‫ وﻻ‬،‫ أن ﺗﻜﻮن أﻏﺮاض اﳌﻌﺎﳉﺔ وﳑﺎرﺳﺘﻬﺎ ﻣﺸﺮوﻋﺔ‬.٢
and do not violate public order or morals. .‫ﺗﺨﺎﻟﻒ اﻟﻨﻈﺎم اﻟﻌﺎم أو اﻵداب اﻟﻌﺎﻣﺔ‬

١٢
 FollowArticle 5 ٥ ‫ﺗﺎﺑﻊ اﳌﺎدة‬
3. The purpose and duration of the processing shall not ‫ وﻳﺠﺐ‬،‫ ﻋﺪم ﲡﺎوز اﻟﻐﺮض اﶈﺪد ﻟﻠﻤﻌﺎﳉﺔ وﻣﺪﺗﻬﺎ‬.٣
be exceeded, and the controller, the data subject, and any ‫إﺧﻄﺎر اﳌﺘﺤﻜﻢ أو اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت أو ﻛﻞ ذي‬
concerned party shall be notified of the time required for
.‫ ﺑﺎﳌﺪة اﻟﻼزﻣﺔ ﻟﻠﻤﻌﺎﳉﺔ‬،‫ ﺑﺤﺴﺐ اﻷﺣﻮال‬،‫ﺻﻔﺔ‬
processing.
‫ مﺣﻮ اﻟﺒﻴــــــﺎﻧﺎت اﻟﺸﺨﺼﻴــــﺔ ﺑﺎﻧﻘﻀﺎء ﻣﺪة اﳌﻌﺎﳉـــــــﺔ‬.٤
4. Delete personal data by the end of processing or
delivery to the controller. .‫أو ﺗﺴﻠﻴﻤﻬﺎ ﻟﻠﻤﺘﺤﻜﻢ‬
5. Perform or refrain from work that would make ‫ اﻟﻘﻴﺎم ﺑﻌﻤﻞ أو اﻻﻣﺘﻨﺎع ﻋﻦ ﻋﻤﻞ ﻳﻜﻮن ﻣﻦ ﺷﺄﻧﻪ إﺗﺎﺣﺔ‬.٥
personal data or processing results available except in ‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﻧﺘﺎﺋﺞ اﳌﻌﺎﳉﺔ إﻻ ﻓـﻲ اﻷﺣﻮال‬
legally authorized circumstances. .‫اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
6. Not to process personal data that is in conflict with the ‫ ﻋﺪم إﺟﺮاء أي ﻣﻌﺎﳉﺔ ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﺗﺘﻌﺎرض ﻣﻊ‬.٦
intended purpose of its controller unless it is for ‫ﻏﺮض اﳌﺘﺤﻜﻢ ﻓﻴﻬﺎ أو ﻧﺸﺎﻃﻪ إﻻ إذا ﻛﺎن ذﻟﻚ ﺑﻐﺮض‬
statistical, educational, non-profit purposes and without ‫إﺣﺼﺎﺋﻲ أو ﺗﻌﻠﻴﻤﻲ وﻻ ﻳﻬﺪف ﻟﻠﺮﺑﺢ ودون اﻹﺧﻼل ﺑﺤﺮﻣﺔ‬
prejudice to the inviolability of private life. .‫اﳊﻴﺎة اﳋﺎﺻﺔ‬
7. Protectand secure the processing , the electronic ‫ ﺣﻤﺎﻳﺔ وﺗﺄﻣﲔ ﻋﻤﻠﻴﺔ اﳌﻌﺎﳉﺔ واﻟﻮﺳﺎﺋﻂ واﻷﺟﻬﺰة‬.٧
mediums used in the processing and the content of ‫اﻹﻟﻜﺘﺮوﻧﻴﺔ اﳌﺴﺘﺨﺪﻣﺔ ﻓـﻲ ذﻟﻚ وﻣﺎ ﻋﻠﻴﻬﺎ ﻣﻦ ﺑﻴﺎﻧﺎت‬
personal data. .‫ﺷﺨﺼﻴﺔ‬
8. Not to cause any harm to the data subject either
‫ ﻋﺪم إﳊﺎق أي ﺿﺮر ﺑﺎﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﺑﺸﻜﻞ‬.٨
directly or indirectly.
.‫ﻣﺒﺎﺷﺮ أو ﻏﻴﺮ ﻣﺒﺎﺷﺮ‬
9. Set up a special record for processing operations, that
‫ ﻋﻠﻰ أن‬،‫ إﻋﺪاد ﺳﺠﻞ ﺧﺎص ﺑﻌﻤﻠﻴﺎت اﳌﻌﺎﳉﺔ ﻟﺪﻳﻪ‬.٩
includes the categories of processing performed on behalf
‫ﻳﺘﻀﻤﻦ ﻓﺌﺎت اﳌﻌﺎﳉﺔ اﻟﺘﻲ ﻳﺠﺮﻳﻬﺎ ﻧﻴﺎﺑﺔ ﻋﻦ أي ﻣﺘﺤﻜﻢ‬
of any control, contact data, data protection
‫ واﳌﺪد‬،‫وﺑﻴﺎﻧﺎت اﻻﺗﺼﺎل ﺑﻪ وﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت ﻟﺪﻳﻪ‬
administrator, processing durations, restrictions, scope,
‫اﻟﺰﻣﻨﻴﺔ ﻟﻠﻤﻌﺎﳉﺔ وﻗﻴﻮدﻫﺎ وﻧﻄﺎﻗﻬﺎ وآﻟﻴﺎت ﻣﺤﻮ اﻟﺒﻴﺎﻧﺎت‬
mechanisms for deleting or modifying personal data, and
‫ ووﺻﻔﺎ ﻟﻺﺟﺮاءات اﻟﺘﻘﻨﻴﺔ‬،‫اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ أو ﺗﻌﺪﻳﻠﻬﺎ‬
a description of the technical and regulatory actions
.‫واﻟﺘﻨﻈﻴﻤﻴﺔ اﳋﺎﺻﺔ ﺑﺄﻣﻦ اﻟﺒﻴﺎﻧﺎت وﻋﻤﻠﻴﺎت اﳌﻌﺎﳉﺔ‬
taken for data security and processing operations.
10. Provide the means to demonstrate its compliance with ‫ ﺗﻮﻓﻴﺮ اﻹﻣﻜﺎﻧﻴﺎت ﻹﺛﺒﺎت اﻟﺘﺰاﻣﻪ ﺑﺘﻄﺒﻴﻖ أﺣﻜﺎم ﻫﺬا‬-١٠
the application of the provisions of this Law when ‫اﻟﻘﺎﻧﻮن ﻋﻨﺪ ﻃﻠﺐ اﳌﺘﺤﻜﻢ وﲤﻜﲔ اﳌﺮﻛﺰ ﻣﻦ اﻟﺘﻔﺘﻴﺶ‬
requested by the controller and enable the Centre to .‫واﻟﺮﻗﺎﺑﺔ ﻟﻠﺘﺄﻛﺪ ﻣﻦ اﻟﺘﺰاﻣﻪ ﺑﺬﻟﻚ‬
inspect and control it to ensure its compliance. ‫ اﳊﺼﻮل ﻋﻠﻰ ﺗﺮﺧﻴﺺ أو ﺗﺼﺮﻳﺢ ﻣﻦ اﳌﺮﻛﺰ ﻟﻠﺘﻌﺎﻣﻞ‬.١١
11. Obtain a license or authorization from the Centre to .‫ﻋﻠﻰ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
handle personal [Link] Article ‫ ﻳﻠﺘﺰم اﳌﻌﺎﻟﺞ ﺧﺎرج ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ ﺑﺘﻌﻴﲔ‬.١٢
12. Any processor residing outside the Arab Republic of ‫ﳑﺜﻞ ﻟﻪ ﻓـﻲ ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ وذﻟﻚ ﻋﻠﻰ اﻟﻨﺤﻮ‬
Egypt is obliged to appoint a representative in the Arab .‫اﻟﺬي ﺗﺒﻴﻨﻪ اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ‬
Republic of Egypt, as stated in the Executive Regulation. ‫ ﻳﻠﺘﺰم ﻛﻞ ﻣﻨﻬﻢ ﺑﺠﻤﻴﻊ‬،‫وﻓـﻲ ﺣﺎل وﺟﻮد أﻛﺜﺮ ﻣﻦ ﻣﻌﺎﻟﺞ‬
In the absence of a contract that clearly establishes their ‫اﻻﻟﺘﺰاﻣﺎت اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن وذﻟﻚ ﻓـﻲ‬
respective obligations and responsibilities, each of them ‫ﺣﺎل ﻋﺪم وﺟﻮد ﻋﻘﺪ ﻳﺤﺪد اﻟﺘﺰاﻣﺎت وﻣﺴﺌﻮﻟﻴﺎت ﻛﻞ ﻣﻨﻬﻢ‬
shall comply with all the obligations set forth in this Law. .‫ﺑﻮﺿﻮح‬
The executive regulation of this Law shall define the ‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻟﺴﻴﺎﺳﺎت‬
policies, procedures, controls, conditions, instructions ‫واﻹﺟﺮاءات واﻟﻀﻮاﺑﻂ واﻟﺸﺮوط واﻟﺘﻌﻠﻴﻤﺎت واﳌﻌﺎﻳﻴﺮ‬
and standards for those obligations. .‫اﻟﻘﻴﺎﺳﻴﺔ ﻟﺘﻠﻚ اﻻﻟﺘﺰاﻣﺎت‬

١٣
 Third: Processing Requirements ‫ﺛﺎﻟﺜﺎ – ﺷﺮوط اﳌﻌﺎﳉﺔ‬

Article 6 ٦ ‫اﳌﺎدة‬
Processing is considered legitimate and legal in any of the ‫ﺗﻌﺪ اﳌﻌﺎﳉﺔ اﻹﻟﻜﺘﺮوﻧﻴﺔ ﻣﺸﺮوﻋﺔ وﻗﺎﻧﻮﻧﻴﺔ ﻓـﻲ ﺣﺎل ﺗﻮﻓﺮ‬
following cases: :‫أي ﻣﻦ اﳊﺎﻻت اﻵﺗﻴﺔ‬
1. Consent of the data subject to the processing for (a)
‫ ﻣﻮاﻓﻘﺔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻋﻠﻰ إﺟﺮاء اﳌﻌﺎﳉﺔ‬.١
certain purpose(s)
.‫ﻣﻦ أﺟﻞ ﲢﻘﻴﻖ ﻏﺮض ﻣﺤﺪد أو أﻛﺜﺮ‬
2. Processing is necessary in compliance with a contractual
obligation, legal action, to conclude a contract in favour of ‫ أن ﺗﻜﻮن اﳌﻌﺎﳉﺔ ﻻزﻣﺔ وﺿﺮورﻳﺔ ﺗﻨﻔﻴﺬا ﻻﻟﺘﺰام‬.٢
the data subject, or to exercise any action seeking the legal ‫ﺗﻌﺎﻗﺪي أو ﺗﺼﺮف ﻗﺎﻧﻮﻧﻲ أو ﻹﺑﺮام ﻋﻘﺪ ﻟﺼﺎﻟﺢ اﻟﺸﺨﺺ‬
rights of the data subject or defending them. ‫ أو ﳌﺒﺎﺷﺮة أي ﻣﻦ إﺟﺮاءات اﳌﻄﺎﻟﺒﺔ‬،‫اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
3. The execution of an obligation is regulated by law or order .‫ﺑﺎﳊﻘﻮق اﻟﻘﺎﻧﻮﻧﻴﺔ ﻟﻪ أو اﻟﺪﻓﺎع ﻋﻨﻬﺎ‬
from the competent investigating authorities or by a judicial ‫ ﺗﻨﻔﻴﺬ اﻟﺘﺰام ﻳﻨﻈﻤﻪ اﻟﻘﺎﻧﻮن أو أﻣﺮ ﻣﻦ ﺟﻬﺎت اﻟﺘﺤﻘﻴﻖ‬.٣
decision. .‫اﳌﺨﺘﺼﺔ أو ﺑﻨﺎء ﻋﻠﻰ ﺣﻜﻢ ﻗﻀﺎﺋﻲ‬
To enable the controller to fulfil his or her obligations or to
‫ ﲤﻜﲔ اﳌﺘﺤﻜﻢ ﻣﻦ اﻟﻘﻴﺎم ﺑﺎﻟﺘﺰاﻣﺎﺗﻪ أو أي ذي ﺻﻔﺔ ﻣﻦ‬.٤
exercise his or her legitimate rights, unless it conflicts with
the fundamental rights and freedoms of the person ‫ ﻣﺎ ﻟﻢ ﻳﺘﻌﺎرض ذﻟﻚ ﻣﻊ اﳊﻘﻮق‬،‫ﳑﺎرﺳﺔ ﺣﻘﻮﻗﻪ اﳌﺸﺮوﻋﺔ‬
concerned. .‫واﳊﺮﻳﺎت اﻷﺳﺎﺳﻴﺔ ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬

Fourth: Notification ‫راﺑﻌﺎ – اﻻﻟﺘﺰام ﺑﺎﻹﺧﻄﺎر واﻻﺑﻼغ‬

and Reporting Obligation

Article 7 ٧ ‫اﳌﺎدة‬
The processor and controller are committed, whenever it comes ‫ﻳﻠﺘﺰم ﻛﻞ ﻣﻦ اﳌﺘﺤﻜﻢ واﳌﻌﺎﻟﺞ ﺑﺤﺴﺐ اﻷﺣﻮال ﺣﺎل ﻋﻠﻤﻪ‬
to their attention that personal data is being violated, to notify ‫ﺑﻮﺟﻮد ﺧﺮق أو اﻧﺘﻬﺎك ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ ﺑﺈﺑﻼغ‬
the Centre within seventy-two hours. In case this violation or ‫ وﻓـﻲ ﺣﺎل ﻛﺎن ﻫﺬا‬،‫اﳌﺮﻛﺰ ﺧﻼل اﺛﻨﺘﲔ وﺳﺒﻌﲔ ﺳﺎﻋﺔ‬
hacking is related to national security matters, the notification ‫اﳋﺮق أو اﻻﻧﺘﻬﺎك ﻣﺘﻌﻠﻘﺎ ﺑﺎﻋﺘﺒﺎرات ﺣﻤﺎﻳﺔ اﻷﻣﻦ اﻟﻘﻮﻣﻲ‬
must be immediate. In all cases, national security authorities
‫ وﻋﻠﻰ اﳌﺮﻛﺰ وﰲ ﺟﻤﻴﻊ اﻷﺣﻮال إﺧﻄﺎر‬،‫ﻓﻴﻜﻮن اﻹﺑﻼغ ﻓﻮرﻳﺎ‬
shall immediately be notified. Meanwhile, the Center shall be
furnished within seventy-two hours, with the following: ‫ ﻛﻤﺎ ﻳﻠﺘﺰم ﲟﻮاﻓﺎة اﳌﺮﻛﺰ‬،‫ﺟﻬﺎت اﻷﻣﻦ اﻟﻘﻮﻣﻲ ﺑﺎﻟﻮاﻗﻌﺔ ﻓﻮرا‬
1. Description of the nature of the violation/breach, its form, :‫ﺧﻼل اﺛﻨﺘﲔ وﺳﺒﻌﲔ ﺳﺎﻋﺔ ﻣﻦ ﺗﺎرﻳﺦ ﻋﻠﻤﻪ ﲟﺎ ﻳﺄﺗﻲ‬
reason and an estimated amount of the personal data and its ‫ وﺻﻮرﺗﻪ وأﺳﺒﺎﺑﻪ‬،‫ وﺻﻒ ﻃﺒﻴﻌﺔ اﳋﺮق أو اﻻﻧﺘﻬﺎك‬.١
records. .‫واﻟﻌﺪد اﻟﺘﻘﺮﻳﺒﻲ ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﺳﺠﻼﺗﻬﺎ‬
2. Data of its personal data protection Officer. .‫ ﺑﻴﺎﻧﺎت ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ‬.٢
3. Expected consequences of the breach/violation incident. .‫ اﻵﺛﺎر اﶈﺘﻤﻠﺔ ﳊﺎدث اﳋﺮق أو اﻻﻧﺘﻬﺎك‬.٣
4. Description of actions taken and recommended to counter ‫ وﺻﻒ اﻹﺟﺮاءات اﳌﺘﺨﺬة واﳌﻘﺘﺮح ﺗﻨﻔﻴﺬﻫﺎ ﳌﻮاﺟﻬﺔ ﻫﺬا‬.٤
this violation and minimizing its effects. .‫اﳋﺮق أو اﻻﻧﺘﻬﺎك واﻟﺘﻘﻠﻴﻞ ﻣﻦ آﺛﺎره اﻟﺴﻠﺒﻴﺔ‬
5. Documentation of any violation/breach of personal data, and
،‫ ﺗﻮﺛﻴﻖ أي ﺧﺮق أو اﻧﺘﻬﺎك ﻟﻠﺒﻴـــــﺎﻧﺎت اﻟﺸﺨﺼﻴــــــﺔ‬.٥
the corrective actions taken to encounter it.
.‫واﻹﺟﺮاءات اﻟﺘﺼﺤﻴﺤﻴﺔ اﳌﺘﺨﺬة ﳌﻮاﺟﻬﺘﻪ‬
6. Any documents, data or information requested by the Centre
. .‫ أي وﺛﺎﺋﻖ أو ﻣﻌﻠﻮﻣﺎت أو ﺑﻴﺎﻧﺎت ﻳﻄﻠﺒﻬﺎ اﳌﺮﻛﺰ‬.٦
In all cases, the controller and the processor shall, as the case ‫ ﺑﺤﺴﺐ‬،‫وﻓـﻲ ﺟﻤﻴﻊ اﻷﺣﻮال ﻳﺠﺐ ﻋﻠﻰ اﳌﺘﺤﻜﻢ واﳌﻌﺎﻟﺞ‬
may be, notify the data subject within three working days of the ‫ إﺧﻄﺎر اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﺧﻼل ﺛﻼﺛﺔ أﻳﺎم‬،‫اﻷﺣﻮال‬
date of the report and the action taken. .‫ﻋﻤﻞ ﻣﻦ ﺗﺎرﻳﺦ اﻹﺑﻼغ وﻣﺎ ﰎ اﺗﺨﺎذه ﻣﻦ إﺟﺮاءات‬
The Executive Regulation of this Law shall determine the ‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻹﺟﺮاءات اﳋﺎﺻﺔ‬
procedures for reporting and notification. .‫ﺑﺎﻹﺑﻼغ واﻹﺧﻄﺎر‬

١٤
 Chapter - 4 ‫اﻟﻔﺼﻞ اﻟﺮاﺑﻊ‬
Data Protection Officer "‫"ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬

First: Data Protection ‫أوﻻ – ﺗﻌﻴﲔ ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ‬

Officer Appointment ‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬

Article 8 ٨ ‫اﳌﺎدة‬

The Centre shall establish a registry of data officers, and the ‫ﻳﻨﺸﺄ ﺑﺎﳌﺮﻛﺰ ﺳﺠﻞ ﻟﻘﻴﺪ ﻣﺴﺌﻮﻟﻲ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬
executive regulation of the law shall define the conditions,
‫ وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن ﺷﺮوط‬،‫اﻟﺸﺨﺼﻴﺔ‬
procedures and registration mechanisms..The Legal
.‫اﻟﻘﻴﺪ وإﺟﺮاءاﺗﻪ وآﻟﻴﺎت اﻟﺘﺴﺠﻴﻞ‬
representatives of controllers/processors that are legal
persons are committed to appoint, within their entity, an ‫وﻳﻠﺘﺰم اﳌﻤﺜﻞ اﻟﻘﺎﻧﻮﻧﻲ ﻟﻠﺸﺨــــﺺ اﻻﻋﺘﺒﺎري ﻷي ﻣﺘﺤﻜـــــﻢ‬
officer responsible for personal data protection by ‫أو ﻣﻌﺎﻟﺞ ﺑﺄن ﻳﻌﲔ داﺧﻞ ﻛﻴﺎﻧﻪ اﻟﻘﺎﻧﻮﻧﻲ وﻫﻴﻜﻠﻪ اﻟﻮﻇﻴﻔﻲ‬
registering this person in the registry of Personal Data ،‫ﻣﻮﻇﻔﺎ ﻣﺨﺘﺼﺎ ﻣﺴﺌﻮﻻ ﻋﻦ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
Protection Officers of the Centre , and this is to be ‫وذﻟﻚ ﺑﻘﻴﺪه ﻓـﻲ ﺳﺠﻞ ﻣﺴﺌﻮﻟﻲ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
announced. .‫ وﻳﻌﻠﻦ ﻋﻦ ذﻟﻚ‬،‫ﺑﺎﳌﺮﻛﺰ‬
In case the controllers or processors are natural persons, ‫وﻳﻜﻮن اﻟﺸﺨﺺ اﻟﻄﺒﻴﻌﻲ اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﻫﻮ اﳌﺴﺌﻮل‬
they shall be responsible for the implementation of this law
.‫ﻋﻦ ﺗﻄﺒﻴﻖ أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
provisions’.

Obligations of the Data ‫ﺛﺎﻧﻴﺎ – اﻟﺘﺰاﻣﺎت ﻣﺴﺌﻮل‬

Officer the Data Officer ‫ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬

Article 9 ٩ ‫اﳌﺎدة‬
Data officer is committed to apply provisions of the ‫ﻳﻜﻮن ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻣﺴﺌﻮﻻ ﻋﻦ ﺗﻨﻔﻴﺬ‬
present law, its executive regulation, and decisions of the
‫ وﻣﺮاﻗﺒﺔ‬،‫أﺣﻜﺎم اﻟﻘﺎﻧﻮن وﻻﺋﺤﺘﻪ اﻟﺘﻨﻔﻴﺬﻳﺔ وﻗﺮارات اﳌﺮﻛﺰ‬
Centre in addition to monitoring the procedures within
its entity and receive requests related to personal data, ‫ وﺗﻠﻘﻰ‬،‫اﻹﺟﺮاءات اﳌﻌﻤﻮل ﺑﻬﺎ داﺧﻞ ﻛﻴﺎﻧﻪ اﻹﺷﺮاف ﻋﻠﻴﻬﺎ‬
all in accordance with the provisions of this law. ‫اﻟﻄﻠﺒﺎت اﳌﺘﻌﻠﻘﺔ ﺑﺎﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﻓﻘﺎ ﻷﺣﻜﺎم ﻫﺬا‬
In particular, the processor shall be committed to the .‫اﻟﻘﺎﻧﻮن‬
following: :‫وﻳﻠﺘﺰم ﻋﻠﻰ اﻷﺧﺺ ﺑﺎﻵﺗﻲ‬
1. Conducting periodic evaluation and examination of
‫ إﺟﺮاء اﻟﺘﻘﻴﻴﻢ واﻟﻔﺤﺺ اﻟﺪوري ﻟﻨﻈﻢ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬.١
personal data related protection systems ,preventing its
penetration, documenting evaluation results and issuing ‫ وﺗﻮﺛﻴﻖ ﻧﺘﺎﺋﺞ اﻟﺘﻘﻴﻴﻢ وإﺻﺪار‬،‫اﻟﺸﺨﺼﻴﺔ وﻣﻨﻊ اﺧﺘﺮاﻗﻬﺎ‬
the necessary recommendations for its protection. .‫اﻟﺘﻮﺻﻴﺎت اﻟﻼزﻣﺔ ﳊﻤﺎﻳﺘﻬﺎ‬
2. Acting as a point of direct contact with the Centre ‫ اﻟﻌﻤﻞ ﻛﻨﻘﻄﺔ اﺗﺼﺎل ﻣﺒﺎﺷﺮة ﻣﻊ اﳌﺮﻛﺰ وﺗﻨﻔﻴﺬ‬.٢
and implementing its decisions regarding the application .‫ ﻓﻴﻤﺎ ﻳﺨﺺ ﺗﻄﺒﻴﻖ أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬،‫ﻗﺮاراﺗﻪ‬
of the provisions of this law.
‫ ﲤﻜﲔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻣﻦ ﳑﺎرﺳﺔ ﺣﻘﻮﻗﻪ‬.٣
3. Enabling data subject to exercise the rights stipulated
in this law. .‫اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
4. Notifying the Centre in cases of any breach or ‫ إﺧﻄﺎر اﳌﺮﻛﺰ ﻓـﻲ ﺣﺎل وﺟﻮد أي ﺧﺮق أو اﻧﺘﻬـــــﺎك‬.٤
violation of personal data. .‫ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪﻳﻪ‬

١٥
 Follow Article 9 ٩ ‫ﺗﺎﺑﻊ اﳌﺎدة‬
5. Responding to requests submitted by data subject or any ‫ اﻟﺮد ﻋﻠﻰ اﻟﻄﻠﺒﺎت اﳌﻘﺪﻣﺔ ﻣﻦ اﻟﺸﺨﺺ اﳌﻌﻨﻲ‬.٥
person of capacity, and respond to the Centre in the ‫ واﻟﺮد ﻋﻠﻰ اﳌﺮﻛﺰ ﻓـﻲ اﻟﺘﻈﻠﻤﺎت‬،‫ﺑﺎﻟﺒﻴﺎﻧﺎت أو ﻛﻞ ذي ﺻﻔﺔ‬
grievances submitted by any of them in accordance with
the provisions of this law. .‫اﳌﻘﺪﻣﺔ إﻟﻴﻪ ﻣﻦ أي ﻣﻨﻬﻤﺎ وﻓﻘﺎ ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
6. Following up the registration and updating of the ‫ ﻣﺘﺎﺑﻌﺔ اﻟﻘﻴﺪ واﻟﺘﺤﺪﻳﺚ ﻟﺴﺠﻞ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻟﺪى‬.٦
personal data record of the controller or the record of ‫ ﲟﺎ ﻳﻜﻔﻞ‬،‫اﳌﺘﺤﻜﻢ أو ﺳﺠﻞ ﻋﻤﻠﻴﺎت اﳌﻌﺎﳉﺔ ﻟﺪى اﳌﻌﺎﻟﺞ‬
processing operations with the processor, in order to
.‫ﺿﻤﺎن دﻗﺔ اﻟﺒﻴﺎﻧﺎت واﳌﻌﻠﻮﻣﺎت اﳌﻘﻴﺪة ﺑﻪ‬
ensure the accuracy of the data and information recorded
there in. ‫ إزاﻟﺔ أي ﻣﺨﺎﻟﻔﺎت ﻣﺘﻌﻠﻘﺔ ﺑﺎﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ داﺧﻞ‬.٧
7. Removing any violations of personal data within the .‫ واﺗﺨﺎذ اﻹﺟﺮاءات اﻟﺘﺼﺤﻴﺤﻴﺔ ﺣﻴﺎﻟﻬﺎ‬،‫ﻛﻴﺎﻧﻪ‬
entity, and taking corrective actions in this regard. ،‫ ﺗﻨﻈﻴﻢ اﻟﺒﺮاﻣﺞ اﻟﺘﺪرﻳﺒﻴﺔ اﻟﻼزﻣﺔ ﳌﻮﻇﻔﻲ ﻛﻴﺎﻧﻪ‬.٨
8. Organizing the necessary training programmes for the
employees of the entity, to qualify the employees with the .‫ﻟﺘﺄﻫﻴﻠﻬﻢ ﲟﺎ ﻳﺘﻨﺎﺳﺐ ﻣﻊ ﻣﺘﻄﻠﺒﺎت ﻫﺬا اﻟﻘﺎﻧﻮن‬
requirements of this law. ‫وﲢــــﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳــــــﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻻﻟﺘﺰاﻣـــــﺎت‬
The executive regulation of this law shall determine the ‫واﻹﺟﺮاءات واﳌﻬﺎم اﻷﺧﺮى اﻟﺘﻲ ﻳﺠﺐ ﻋﻠﻰ ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ‬
obligations, procedures and other tasks that the personal
.‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻟﻘﻴﺎم ﺑﻬﺎ‬
data protection officer must perform.

Chapter - 5 ‫اﻟﻔﺼﻞ اﳋﺎﻣﺲ‬

Procedures of Data Availability "‫"إﺟﺮاءات وإﺗﺎﺣﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬

Article 10 ١٠ ‫اﳌﺎدة‬
Each Controller, processor, and possessor are committed, ‫ﻳﻠﺘﺰم ﻛﻞ ﻣﻦ اﳌﺘﺤﻜﻢ واﳌﻌﺎﻟﺞ واﳊﺎﺋﺰ ﻋﻨﺪ ﻃﻠﺐ إﺗﺎﺣﺔ‬
when personal data is requested, to take the following :‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﺑﺎﻹﺟﺮاءات اﻵﺗﻴﺔ‬
procedure: ‫ أن ﻳﻜﻮن ﺑﻨـــــﺎء ﻋﻠﻰ ﻃﻠﺐ ﻛﺘﺎﺑﻲ ﻳﻘﺪم إﻟﻴﻪ ﻣﻦ ذي ﺻﻔﺔ‬١
1. The request shall be writing and directed to them by .‫أو وﻓﻘﺎ ﻟﺴﻨﺪ ﻗﺎﻧﻮﻧﻲ‬
person of a capacity or according to a legal basis. ‫ اﻟﺘﺤﻘﻖ ﻣﻦ ﺗﻮاﻓﺮ اﳌﺴﺘﻨﺪات اﻟﻼزﻣﺔ ﻟﺘﻨﻔﻴﺬ اﻹﺗﺎﺣﺔ‬.٢
2. Verify the existence of the required documents for .‫واﻻﺣﺘﻔﺎظ ﺑﻬﺎ‬
executing the availability and retaining the data. ‫ اﻟﺒﺖ ﻓـﻲ اﻟﻄﻠﺐ وﻣﺴﺘﻨﺪاﺗﻪ ﺧﻼل ﺳﺘﺔ أﻳﺎم ﻋﻤﻞ ﻣﻦ‬.٣
A decision shall be taken with regards the application and ‫ وﻋﻨﺪ ﺻﺪور ﻗﺮار ﺑﺎﻟﺮﻓﺾ ﻳﺠﺐ أن‬،‫ﺗﺎرﻳﺦ ﺗﻘﺪﳝﻪ إﻟﻴﻪ‬
its documents within six working days from the date of its ‫ وﻳﻌﺘﺒﺮ ﻣﻀﻲ اﳌﺪة اﳌﺸﺎر إﻟﻴﻬﺎ دون‬،‫ﻳﻜﻮن اﻟﺮﻓﺾ ﻣﺴﺒﺒﺎ‬
submission , In the event of a rejection decision, there .‫رد ﻓـﻲ ﺣﻜﻢ اﻟﺮﻓﺾ‬
must be a cause of rejection.

Article 11 ١١ ‫اﳌﺎدة‬
The digital evidence derived from personal data shall have
‫ﻳﻜﻮن ﻟﻠﺪﻟﻴﻞ اﻟﺮﻗﻤﻲ اﳌﺴﺘﻤﺪ ﻣﻦ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻃﺒﻘﺎ‬
the same credibility as a legal proof, by virtue of this law the
‫ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن ذات اﳊﺠﻴﺔ ﻓـﻲ اﻹﺛﺒﺎت اﳌﻘﺮرة ﻟﻸدﻟﺔ‬
same as proof derived from the written data and information
‫اﳌﺴﺘﻤﺪة ﻣﻦ اﻟﺒﻴﺎﻧﺎت واﳌﻌﻠﻮﻣﺎت اﳋﻄﻴﺔ ﻣﺘﻰ اﺳﺘﻮﻓﺖ اﳌﻌﺎﻳﻴﺮ‬
that meet the technical standards and conditions included in
.‫واﻟﺸﺮوط اﻟﻔﻨﻴﺔ اﻟﻮاردة ﺑﺎﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن‬
the executive regulation of this law.

١٦
 Chapter - 6 ‫اﻟﻔﺼﻞ اﻟﺴﺎدس‬
Sensitive Personal Data "‫"اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳊﺴﺎﺳﺔ‬

Article 12 ١٢ ‫اﳌﺎدة‬

Processor and Controller, whether they are natural or ‫ﺷﺨﺼﺎ ﻃﺒﻴﻌﻴــًــﺎ‬

ً ‫ﺣﻈﺮ ﻋﻠﻰ اﳌﺘﺤﻜـــــﻢ أو اﳌﻌﺎﻟﺞ ﺳﻮاء ﻛﺎن‬
juristic persons, are prohibited from collecting, ‫أو اﻋﺘﺒﺎرﻳﺎ ﺟﻤﻊ ﺑﻴـــــﺎﻧﺎت ﺷﺨﺼﻴﺔ ﺣﺴﺎﺳــــــﺔ أو ﻧﻘﻠﻬـــــﺎ‬
transferring, storing, processing or disclosing sensitive
‫أو ﺗﺨﺰﻳﻨﻬﺎ أو ﺣﻔﻈﻬﺎ أو ﻣﻌﺎﳉﺘﻬﺎ أو إﺗﺎﺣﺘﻬﺎ إﻻ ﺑﺘﺮﺧﻴﺺ‬
data without a license from the Centre .
.‫ﻣﻦ اﳌﺮﻛﺰ‬
Apart from the legally authorized, the explicit written
‫ ﻳﻠﺰم اﳊﺼﻮل ﻋﻠﻰ‬،‫وﻓﻴﻤﺎ ﻋﺪا اﻷﺣﻮال اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
consent of the data subject must be obtained.
.‫ﻣﻮاﻓﻘﺔ ﻛﺘﺎﺑﻴﺔ وﺻﺮﻳﺤﺔ ﻣﻦ اﻟﺸﺨﺺ اﳌﻌﻨﻲ‬
In the event any of these operations is related to children,
‫وﻓـﻲ ﺣﺎﻟﺔ إﺟﺮاء أي ﻋﻤﻠﻴﺔ ﳑﺎ ذﻛﺮ ﺗﺘﻌﻠﻖ ﺑﺒﻴﺎﻧﺎت‬
the guardian’s consent is required.
.‫ ﻳﻠﺰم ﻣﻮاﻓﻘﺔ وﻟﻲ اﻷﻣﺮ‬،‫اﻷﻃﻔﺎل‬
the child’s engagement in any game, competition, or any
‫وﻳﺠﺐ أﻻ ﺗﻜﻮن ﻣﺸﺎرﻛﺔ اﻟﻄﻔﻞ ﻓـﻲ ﻟﻌﺒﺔ أو ﻣﺴﺎﺑﻘﺔ أو أي‬
similar activity must not require obtaining further
‫ﻧﺸﺎط آﺧﺮ ﻣﺸﺮوﻃﺔ ﺑﺘﻘﺪﱘ ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﻟﻠﻄﻔﻞ ﺗﺰﻳﺪ‬
personal information than those needed for the purpose of
.‫ﻋﻠﻰ ﻣﺎ ﻫﻮ ﺿﺮوري ﻟﻠﻤﺸﺎرﻛﺔ ﻓـﻲ ذﻟﻚ‬
the activity.
All the foregoing shall be in accordance with the ‫وذﻟﻚ ﻛﻠﻪ وﻓﻘﺎ ﻟﻠﻤﻌﺎﻳﻴﺮ واﻟﻀﻮاﺑﻂ اﻟﺘﻲ ﲢﺪدﻫﺎ اﻟﻼﺋﺤﺔ‬

conditions and criteria set in the executive regulation of .‫اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن‬

this law.

Article 13 ١٣ ‫اﳌﺎدة‬

In addition to obligations set forth in Article 9 of this law, ‫( ﻣﻦ ﻫﺬا‬٩) ‫ﺑﺎﻹﺿﺎﻓﺔ إﻟﻰ اﻻﻟﺘﺰاﻣﺎت اﻟﻮاردة ﺑﺎﳌﺎدة‬
Personal Data Protection Officers and their subordinates ‫ ﻳﻠﺘﺰم ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﺗﺎﺑﻌﻮه‬،‫اﻟﻘﺎﻧﻮن‬
at the controllers’/processors’/ entities are committed to ‫ﻟﺪى اﳌﺘﺤﻜـــــﻢ أو اﳌﻌﺎﻟـﺞ ﺑﺈﺗﺒﺎع واﺳﺘﻴﻔﺎء اﻟﺴﻴﺎﺳـــﺎت‬
follow and comply with the policies and procedures ‫واﻹﺟـــــــﺮاءات اﻟﺘﺄﻣﻴﻨﻴﺔ اﻟﻼزﻣﺔ ﻟﻌﺪم ﺧﺮق اﻟﺒﻴـــــﺎﻧﺎت‬
ensuring safety of the sensitive data from violations or .‫اﻟﺸﺨﺼﻴﺔ اﳊﺴﺎﺳﺔ أو اﻧﺘﻬﺎﻛﻬﺎ‬
breaches.

١٧
 Chapter - 7 ‫اﻟﻔﺼﻞ اﻟﺴﺎﺑﻊ‬
Cross-border flow of Personal Data "‫"اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻋﺒﺮ اﳊﺪود‬

Article 14 ١٤ ‫اﳌﺎدة‬

All operations of data transfer that have been collected, ‫ﻳﺤﻈﺮ إﺟﺮاء ﻋﻤﻠﻴﺎت ﻧﻘﻞ ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﻟﺘﻲ ﰎ‬
prepared, stored or shared for processing to any foreign ‫ﺟﻤﻌﻬﺎ أو ﲡﻬﻴﺰﻫﺎ ﻟﻠﻤﻌﺎﳉﺔ إﻟﻰ دوﻟﺔ أﺟﻨﺒﻴﺔ أو ﺗﺨﺰﻳﻨﻬﺎ‬
country, are prohibited unless there is a minimum ‫أو ﻣﺸﺎرﻛﺘﻬﺎ إﻻ ﺑﺘﻮاﻓﺮ ﻣﺴﺘﻮى ﻣﻦ اﳊﻤﺎﻳﺔ ﻻ ﻳﻘﻞ ﻋﻦ‬
standard of protection of no less than the level stipulated ‫ وﺑﺘﺮﺧﻴـــــــﺺ‬،‫اﳌﺴــــﺘﻮى اﳌﻨﺼﻮص ﻋﻠﻴﻪ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
.‫أو ﺗﺼﺮﻳﺢ ﻣﻦ اﳌﺮﻛﺰ‬
by law and with the license or permission of the Center.
‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳــــــــﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻟﺴﻴﺎﺳــــــﺎت‬
The Executive regulation of this law determines the
‫واﳌﻌﺎﻳﻴﺮ واﻟﻀﻮاﺑﻂ واﻟﻘﻮاﻋــــــﺪ اﻟﻼزﻣﺔ ﻟﻨﻘﻞ أو ﺗﺨـــــﺰﻳﻦ‬
policies related to the transfer, storage or availability of ‫أو ﻣﺸﺎرﻛﺔ أو ﻣﻌﺎﳉﺔ أو إﺗﺎﺣﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻋﺒﺮ‬
the data in cross-border flow, and its protection. .‫اﳊﺪود وﺣﻤﺎﻳﺘﻬﺎ‬

Article 15 ١٥ ‫اﳌﺎدة‬

With Exception to Article 14 of the present law, in case of ‫ ﻳﺠﻮز ﻓـﻲ‬،‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬١٤) ‫اﺳﺘﺜﻨﺎء ﻣﻦ ﺣﻜﻢ اﳌﺎدة‬
the explicit consent of Data Subject or whoever is
‫ﺣﺎﻟﺔ اﳌﻮاﻓﻘﺔ اﻟﺼﺮﻳﺤﺔ ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت أو ﻣﻦ‬
delegated, it is possible to transfer, share, disseminate,
processing of personal data in a cross-border flow to a ‫ﻳﻨﻮب ﻋﻨﻪ ﻧﻘﻞ أو ﻣﺸﺎرﻛﺔ أو ﺗﺪاول أو ﻣﻌﺎﳉﺔ اﻟﺒﻴﺎﻧﺎت‬
state that does not have the same level of protection ‫اﻟﺸﺨﺼﻴﺔ إﻟﻰ دوﻟﺔ ﻻ ﻳﺘﻮاﻓﺮ ﻓﻴﻬﺎ ﻣﺴﺘﻮى اﳊﻤﺎﻳﺔ اﳌﺸﺎر‬
referred to in the previous article in the following cases: :‫ وذﻟﻚ ﻓـﻲ اﳊﺎﻻت اﻵﺗﻴﺔ‬،‫إﻟﻴﻬﺎ ﻓـﻲ اﳌﺎدة اﻟﺴﺎﺑﻘﺔ‬
1. Protection of data subject’s life who is concerned with
the information, and providing them with the needed ‫ وﺗﻮﻓﻴﺮ‬،‫ اﶈﺎﻓﻈﺔ ﻋﻠﻰ ﺣﻴﺎة اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬.١
medical care, medicine, or managing medical assistance .‫اﻟﺮﻋﺎﻳﺔ اﻟﻄﺒﻴﺔ أو اﻟﻌﻼج أو إدارة اﳋﺪﻣﺎت اﻟﺼﺤﻴﺔ ﻟﻪ‬
for them. ‫ ﺗﻨﻔﻴﺬ اﻟﺘﺰاﻣﺎت ﲟﺎ ﻳﻀﻤﻦ إﺛﺒﺎت ﺣﻖ أو ﳑﺎرﺳﺘﻪ أﻣﺎم‬.٢
2. To implement obligations in a way that proves a
.‫ﺟﻬﺎت اﻟﻌﺪاﻟﺔ أو اﻟﺪﻓﺎع ﻋﻨﻪ‬
exercise or defend a right before judicial bodies.
3. Concluding an existing or potentialbetween the ‫ أو ﺳﻴﺘﻢ إﺑﺮاﻣﻪ‬،‫ أو ﺗﻨﻔﻴﺬ ﻋﻘﺪ ﻣﺒﺮم ﺑﺎﻟﻔﻌﻞ‬،‫ إﺑﺮام ﻋﻘﺪ‬.٣
processing officer and a third party, in the interest of the ‫ وذﻟﻚ ﳌﺼﻠﺤﺔ اﻟﺸﺨﺺ‬،‫ﺑﲔ اﳌﺴﺌﻮل ﻋﻦ اﳌﻌﺎﳉﺔ واﻟﻐﻴﺮ‬
person concerned with the data. Execute procedures .‫اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
related to an International judicial cooperation
.‫ ﺗﻨﻔﻴﺬ إﺟﺮاء ﺧﺎص ﺑﺘﻌﺎون ﻗﻀﺎﺋﻲ دوﻟﻲ‬.٤
4. The existence of a state of necessity or a legal obligation
to protect the public interest .‫ وﺟﻮد ﺿﺮورة أو إﻟﺰام ﻗﺎﻧﻮﻧﻲ ﳊﻤﺎﻳﺔ اﳌﺼﻠﺤﺔ اﻟﻌﺎﻣﺔ‬.٥
5. Execution of cash transfers to another country in ‫ إﺟﺮاء ﲢﻮﻳﻼت ﻧﻘﺪﻳﺔ إﻟﻰ دوﻟﺔ أﺧﺮى وﻓﻘﺎ ﻟﺘﺸﺮﻳﻌﺎﺗﻬﺎ‬.٦
accordance with the set forth and applicable legislation. .‫اﶈﺪدة واﻟﺴﺎرﻳﺔ‬
If the transfer or circulation is carried out in
‫ إذا ﻛﺎن اﻟﻨﻘﻞ أو اﻟﺘﺪاول ﻳﺘﻢ ﺗﻨﻔﻴﺬا ﻻﺗﻔﺎق دوﻟﻲ ﺛﻨﺎﺋﻲ‬.٧
implementation of an international bilateral or
multilateral convention to which the Arab Republic of .‫أو ﻣﺘﻌﺪد اﻷﻃﺮاف ﺗﻜﻮن ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ ﻃﺮﻓﺎ ﻓﻴﻪ‬
Egypt is a party.

١٨
 Article 16 ١٦ ‫اﳌﺎدة‬

The controller or processor may provide the personal ‫ إﺗﺎﺣﺔ اﻟﺒﻴﺎﻧﺎت‬،‫ ﺑﺤﺴﺐ اﻷﺣﻮال‬،‫ﻳﺠﻮز ﻟﻠﻤﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ‬
data to another controller or processor outside Egypt ‫اﻟﺸﺨﺼﻴﺔ ﳌﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ آﺧﺮ ﺧﺎرج ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ‬
with a license from the Centre , subject to the below
:‫ﺑﺘﺮﺧﻴﺺ ﻣﻦ اﳌﺮﻛﺰ ﻣﺘﻰ ﺗﻮاﻓﺮت اﻟﺸﺮوط اﻵﺗﻴﺔ‬
conditions:
‫ أو وﺣﺪة‬،‫ اﺗﻔﺎق ﻃﺒﻴﻌﺔ ﻋﻤﻞ ﻛﻞ ﻣﻦ اﳌﺘﺤﻜﻤﲔ أو اﳌﻌﺎﳉﲔ‬.١
1. Both controllers and processors share the same goal
.‫اﻟﻐﺮض اﻟﺬي ﻳﺤﺼﻼن ﲟﻮﺟﺒﻪ ﻋﻠﻰ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
and purpose for which they obtain personal data.
‫ ﺗﻮاﻓﺮ اﳌﺼﻠﺤﺔ اﳌﺸﺮوﻋﺔ ﻟﺪى ﻛﻞ ﻣﻦ اﳌﺘﺤﻜﻤﲔ أو اﳌﻌﺎﳉﲔ‬.٢
2. the legitimate interest of the controllers, processors or
.‫ﻟﻠﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﻟﺪى اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
data subject.
‫ أﻻ ﻳﻘﻞ ﻣﺴﺘﻮى اﳊﻤﺎﻳﺔ اﻟﻘﺎﻧﻮﻧﻴﺔ واﻟﺘﻘﻨﻴﺔ ﻟﻠﺒﻴﺎﻧﺎت‬.٣
3. The legal and technical protection of personal data by
‫اﻟﺸﺨﺼﻴﺔ ﻟﺪى اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ اﳌﻮﺟﻮدة ﺑﺎﳋﺎرج ﻋﻦ‬
the controller or processor outside Egypt shall not be less
than that available in Egypt. .‫اﳌﺴﺘﻮى اﳌﺘﻮاﻓﺮ ﰲ ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ‬

The executive regulation of this law sets forth the ‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻻﺷﺘﺮاﻃﺎت‬
conditions, fees, precautions, measures, and necessary .‫واﻹﺟﺮاءات واﻻﺣﺘﻴﺎﻃﺎت واﳌﻌﺎﻳﻴﺮ واﻟﻘﻮاﻋﺪ اﻟﻼزﻣﺔ ﻟﺬﻟﻚ‬
rules.

Chapter - 8 ‫اﻟﻔﺼﻞ اﻟﺜﺎﻣﻦ‬

Direct Digital Marketing "‫"اﻟﺘﺴﻮﻳﻖ اﻷﻟﻜﺘﺮوﻧﻲ اﳌﺒﺎﺷﺮ‬

Article 17 ١٧ ‫اﳌﺎدة‬

Any communication for the purpose of direct marketing ‫ﻳﺤﻈﺮ إﺟﺮاء أي اﺗﺼﺎل إﻟﻜﺘﺮوﻧﻲ ﺑﻐﺮض اﻟﺘﺴﻮﻳﻖ اﳌﺒﺎﺷﺮ‬
to the data subject is prohibited unless the following :‫ إﻻ ﺑﺘﻮاﻓﺮ اﻟﺸﺮوط اﻵﺗﻴﺔ‬،‫ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
conditions are met:
.‫ اﳊﺼﻮل ﻋﻠﻰ ﻣﻮاﻓﻘﺔ ﻣﻦ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬.١
1. Obtain the consent of the data subject.
.‫ أن ﻳﺘﻀﻤﻦ اﻻﺗﺼﺎل ﻫﻮﻳﺔ ﻣﻨﺸﺌﻪ وﻣﺮﺳﻠﻪ‬.٢
2. Communication must include the identity of its origin
and its sender. .‫ أن ﻳﻜﻮن ﻟﻠﻤﺮﺳﻞ ﻋﻨﻮان ﺻﺤﻴﺢ وﻛﺎف ﻟﻠﻮﺻﻮل إﻟﻴﻪ‬.٣
3. The sender has a correct and accessible address. ‫ اﻹﺷﺎرة إﻟﻰ أن اﻻﺗﺼﺎل اﻹﻟﻜﺘﺮوﻧﻲ ﻣﺮﺳﻞ ﻷﻏﺮاض‬.٤
4. Indicate that electronic communication is sent for .‫اﻟﺘﺴﻮﻳﻖ اﳌﺒﺎﺷﺮ‬
direct marketing purposes. ‫ وﺿﻊ آﻟﻴﺎت واﺿﺤﺔ وﻣﻴﺴﺮة ﻟﺘﻤﻜﲔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ‬.٥
5. Establish clear and accessible mechanisms to enable the ‫ﺑﺎﻟﺒﻴﺎﻧﺎت ﻣﻦ رﻓﺾ اﻻﺗﺼﺎل اﻹﻟﻜﺘﺮوﻧﻲ أو اﻟﻌﺪول ﻋﻦ‬
data subject to refuse or disapprove the electronic .‫ﻣﻮاﻓﻘﺘﻪ ﻋﻠﻰ إرﺳﺎﻟﻬﺎ‬
connection.

١٩
 Article 18 ١٨ ‫اﳌﺎدة‬
The sender of any electronic communication for the ‫ﻳﻠﺘﺰم اﳌﺮﺳﻞ ﻷي اﺗﺼﺎل إﻟﻜﺘﺮوﻧﻲ ﺑﻐﺮض اﻟﺘﺴﻮﻳﻖ اﳌﺒﺎﺷﺮ‬
purpose of direct marketing shall be committed to the :‫ﺑﺎﻻﻟﺘﺰاﻣﺎت اﻵﺗﻴﺔ‬
following: .‫ اﻟﻐﺮض اﻟﺘﺴﻮﻳﻘﻲ اﶈﺪد‬.١
1. A specific marketing purpose ‫ ﻋﺪم اﻹﻓﺼﺎح ﻋﻦ ﺑﻴﺎﻧﺎت اﻻﺗﺼﺎل ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ‬.٢
2. Non-disclosure of personal data .‫ﺑﺎﻟﺒﻴﺎﻧﺎت‬
3. Keeping electronic records that proves the approval of ‫ اﻻﺣﺘﻔﺎظ ﺑﺴﺠﻼت إﻟﻜﺘﺮوﻧﻴﺔ ﻣﺜﺒﺖ ﺑﻬﺎ ﻣﻮاﻓﻘﺔ‬.٣
the data subject and its amendments, or the objection to ‫ أو ﻋﺪم اﻋﺘﺮاﺿﻪ‬،‫اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت وﺗﻌﺪﻳﻼﺗﻬﺎ‬
continue receiving the digital marketing call for a period ‫ ﺑﺸﺄن ﺗﻠﻘﻲ اﻻﺗﺼﺎل اﻹﻟﻜﺘﺮوﻧﻲ اﻟﺘﺴﻮﻳﻘﻲ‬،‫ﻋﻠﻰ اﺳﺘﻤﺮاره‬
of three years as of the date of the last dispatch. .‫وذﻟﻚ ﳌﺪة ﺛﻼث ﺳﻨﻮات ﻣﻦ ﺗﺎرﻳﺦ آﺧﺮ إرﺳﺎل‬
The executive regulation shall sets forth the rules, ‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن اﻟﻘﻮاﻋﺪ واﻟﺸﺮوط‬
conditions and measures in relation to direct digital .‫واﻟﻀﻮاﺑﻂ اﳌﺘﻌﻠﻘﺔ ﺑﺎﻟﺘﺴﻮﻳﻖ اﻹﻟﻜﺘﺮوﻧﻲ اﳌﺒﺎﺷﺮ‬
marketing.

Chapter - 9
‫اﻟﻔﺼﻞ اﻟﺘﺎﺳﻊ‬
Data Centre
"‫"ﻣﺮﻛﺰ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
(Personal Data Protection Centre)

Article 19 ١٩ ‫اﳌﺎدة‬

An economic public authority called the Personal Data ‫ﺗﻨﺸﺄ ﻫﻴﺌﺔ ﻋﺎﻣﺔ اﻗﺘﺼﺎدﻳﺔ ﺗﺴﻤﻰ ))ﻣﺮﻛﺰ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬
Protection Centre shall be established, affiliated to the ‫ وﺗﻜﻮن ﻟﻬﺎ اﻟﺸﺨﺼﻴﺔ‬،‫ ﺗﺘﺒﻊ اﻟﻮزﻳﺮ اﳌﺨﺘﺺ‬،((‫اﻟﺸﺨﺼﻴﺔ‬
concerned minister, and shall have a legal personality, its
‫ وﻳﻜﻮن ﻣﻘﺮﻫﺎ اﻟﺮﺋﻴﺲ ﻣﺤﺎﻓﻈﺔ اﻟﻘﺎﻫﺮة أو إﺣﺪى‬،‫اﻻﻋﺘﺒﺎرﻳﺔ‬
headquarters shall be Cairo or one of the neighbouring
‫ وﺗﻬﺪف إﻟﻰ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬،‫اﶈﺎﻓﻈﺎت اﳌﺠﺎورة ﻟﻬﺎ‬
governorates, it aims to protect personal data and organizes
‫ وﻟﻬﺎ ﻓـﻲ ﺳﺒﻴﻞ ﲢﻘﻴﻖ‬،‫اﻟﺸﺨﺼﻴﺔ وﺗﻨﻈﻴﻢ ﻣﻌﺎﳉﺘﻬﺎ وإﺗﺎﺣﺘﻬﺎ‬
its processing and its availability. In order to achieve its
‫أﻫﺪاﻓﻬﺎ أن ﺗﺒﺎﺷﺮ ﺟﻤﻴﻊ اﻻﺧﺘﺼﺎﺻﺎت اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﺑﻬﺬا‬
objectives it shall exercise all the powers stipulated in this
:‫ وﻟﻬﺎ ﻋﻠﻰ اﻷﺧﺺ اﻵﺗﻲ‬،‫اﻟﻘﺎﻧﻮن‬
law, and in particular:
[Link] and implement policies, strategic plans, and ‫ وﺿﻊ وﺗﻄﻮﻳﺮ اﻟﺴﻴﺎﺳﺎت واﳋﻄﻂ اﻻﺳﺘﺮاﺗﻴﺠﻴﺔ‬.١
programs to protect personal data ‫ واﻟﻘﻴﺎم ﻋﻠﻰ‬،‫واﻟﺒﺮاﻣﺞ اﻟﻼزﻣﺔ ﳊﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
[Link] policies and plans for protecting and processing .‫ﺗﻨﻔﻴﺬﻫﺎ‬
personal data inside the Republic. ‫ ﺗﻮﺣﻴﺪ ﺳﻴﺎﺳﺎت وﺧﻄﻂ ﺣﻤﺎﻳﺔ وﻣﻌﺎﳉﺔ اﻟﺒﻴـــــﺎﻧﺎت‬.٢
[Link] and implement decisions, controls, measures, .‫اﻟﺸﺨﺼﻴﺔ داﺧﻞ اﳉﻤﻬﻮرﻳﺔ‬
procedures, and standards for the protection of personal ‫ وﺿﻊ وﺗﻄﺒﻴﻖ اﻟﻘﺮارات واﻟﻀﻮاﺑﻂ واﻟﺘﺪاﺑﻴﺮ واﻹﺟﺮاءات‬.٣
data. .‫واﳌﻌﺎﻳﻴﺮ اﳋﺎﺻﺔ ﺑﺤﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
[Link] framework for a code of conduct for the ‫ وﺿﻊ إﻃﺎر إرﺷﺎدي ﳌﺪوﻧﺎت اﻟﺴﻠﻮك اﳋﺎﺻﺔ ﺑﺤﻤﺎﻳﺔ‬.٤
protection of personal data, and adopt codes of conduct for ‫ واﻋﺘﻤﺎد ﻣﺪوﻧﺎت اﻟﺴﻠﻮك اﳋﺎﺻﺔ‬،‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
protecting personal data from different parties. .‫ﺑﺤﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﺑﺎﳉﻬﺎت اﳌﺨﺘﻠﻔﺔ‬

٢٠
 follow Article 19 ١٩ ‫ﺗﺎﺑﻊ اﳌﺎدة‬

5. Coordinate and cooperate with all governmental and ‫ اﻟﺘﻨﺴﻴﻖ واﻟﺘﻌﺎون ﻣﻊ ﺟﻤﻴﻊ اﳉﻬﺎت واﻷﺟﻬﺰة اﳊﻜﻮﻣﻴﺔ‬.٥
non-governmental agencies and bodies to guarantee the ‫وﻏﻴﺮ اﳊﻜﻮﻣﻴﺔ ﻓـﻲ ﺿﻤﺎن إﺟﺮاءات ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬
procedures of personal data protection and communicate
.‫ واﻟﺘﻮاﺻﻞ ﻣﻊ ﺟﻤﻴﻊ اﳌﺒﺎدرات ذات اﻟﺼﻠﺔ‬،‫اﻟﺸﺨﺼﻴﺔ‬
with all relevant initiatives
‫ دﻋﻢ ﺗﻄﻮﻳﺮ ﻛﻔﺎءة اﻟﻜﻮادر اﻟﺒﺸﺮﻳﺔ اﻟﻌﺎﻣﻠﺔ ﻓـﻲ ﺟﻤﻴﻊ‬.٦
6. Support and develop the efficiency of the manpower
‫اﳉﻬﺎت اﳊﻜﻮﻣﻴﺔ وﻏﻴﺮ اﳊﻜﻮﻣﻴﺔ اﻟﻘﺎﺋﻤﺔ ﻋﻠﻰ ﺣﻤﺎﻳﺔ‬
working in all governmental and non-governmental
.‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
agencies who are concerned with personal data protection
‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ واﳌﻮاﻓﻘﺎت واﻟﺘﺪاﺑﻴﺮ‬.٧
7. Supportand develop the competence of the working
human power in all governmental and non-governmental ‫اﳌﺨﺘﻠﻔﺔ اﳌﺘﻌﻠﻘﺔ ﺑﺤﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﺗﻄﺒﻴﻖ‬
agencies that are concerned with personal data protection. .‫أﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
8. Certify agencies and individuals and granting them the ‫ وﻣﻨﺤﻬﻢ اﻟﺘﺼﺎرﻳﺢ اﻟﻼزﻣﺔ‬،‫ اﻋﺘﻤﺎد اﳉﻬﺎت واﻷﻓﺮاد‬.٨
necessary license which enables them to provide ‫اﻟﺘﻲ ﺗﺘﻴﺢ ﻟﻬﻢ ﺗﻘﺪﱘ اﻻﺳﺘﺸﺎرات ﻓـﻲ إﺟﺮاءات ﺣﻤﺎﻳﺔ‬
consultation related to the measures and procedures of data .‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
protection. ،‫ ﺗﻠﻘﻰ اﻟﺸﻜﺎوى واﻟﺒﻼﻏﺎت اﳌﺘﻌﻠﻘﺔ ﺑﺄﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬.٩
9. Receive complaints and reports related to the provisions of .‫وإﺻﺪار اﻟﻘﺮارات اﻟﻼزﻣﺔ ﻓـﻲ ﺷﺄﻧﻬﺎ‬
this law and issue the necessary decisions thereon. ‫ إﺑﺪاء اﻟﺮأي ﻓـﻲ ﻣﺸﺮوﻋﺎت اﻟﻘﻮاﻧﲔ واﻻﺗﻔﺎﻗﻴﺎت‬.١٠
10. Provide opinion on draft laws and international ‫اﻟﺪوﻟﻴﺔ اﻟﺘﻲ ﺗﻨﻈﻢ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو ﺗﺘﻌﻠﻖ أو ﺗﻨﻌﻜﺲ‬
conventions regulating personal data or that is related either .‫ﻧﺼﻮﺻﻬﺎ ﺑﺼﻮرة ﻣﺒﺎﺷﺮة أو ﻏﻴﺮ ﻣﺒﺎﺷﺮة ﻋﻠﻴﻬﺎ‬
directly or indirectly to the Centre. ‫ اﻟﺮﻗﺎﺑﺔ واﻟﺘﻔﺘﻴﺶ ﻋﻠﻰ اﳌﺨﺎﻃــــﲔ ﺑﺄﺣﻜﺎم ﻫﺬا‬.١١
11. Controll and inspect those addressed with this law and .‫ واﺗﺨﺎذ اﻹﺟﺮاءات اﻟﻘﺎﻧﻮﻧﻴﺔ اﻟﻼزﻣﺔ‬،‫اﻟﻘﺎﻧﻮن‬
take the necessary legal measures.
،‫ اﻟﺘﺤﻘﻖ ﻣﻦ ﺷﺮوط ﺣﺮﻛﺔ اﻟﺒﻴﺎﻧﺎت ﻋﺒﺮ اﳊﺪود‬.١٢
12. Verify the conditions for cross-border data flow and set
.‫واﺗﺨﺎذ اﻟﻘﺮارات اﳌﻨﻈﻤﺔ ﻟﻬﺎ‬
regulating decisions.
‫ ﺗﻨﻈﻴﻢ اﳌﺆﲤﺮات وورش اﻟﻌﻤﻞ واﻟﺪورات اﻟﺘﺪرﻳﺒﻴﺔ‬.١٣
13. Organize conferences, workshops, training and
‫ وإﺻﺪار اﳌﻄﺒﻮﻋﺎت ﻟﻨﺸﺮ اﻟﻮﻋﻲ واﻟﺘﺜﻘﻴﻒ‬،‫واﻟﺘﺜﻘﻴﻔﻴﺔ‬
educational courses, and issue publications to raise
awareness and educate individuals and entities about the ‫ﻟﻸﻓﺮاد واﳉﻬﺎت ﺣﻮل ﺣﻘﻮﻗﻬﻢ ﻓﻴﻤﺎ ﻳﺘﻌﻠﻖ ﺑﺎﻟﺘﻌﺎﻣﻞ ﻋﻠﻰ‬
Centres’ rights in dealing with personal data. .‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
14. Provide all types of expertise and consultations related to ‫ ﺗﻘﺪﱘ ﺟﻤﻴﻊ أﻧﻮاع اﳋﺒﺮة واﻻﺳــــﺘﺸﺎرات اﳌﺘﻌﻠﻘــﺔ‬.١٤
the protection of personal data, especially for investigation ‫ وﻋﻠﻰ اﻷﺧﺺ ﳉﻬﺎت‬،‫ﺑﺤﻤﺎﻳﺔ اﻟﺒﻴـــــﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
and judicial authorities. .‫اﻟﺘﺤﻘﻴﻖ واﳉﻬﺎت اﻟﻘﻀﺎﺋﻴﺔ‬
15. Conclude agreements and memorandums of ‫ إﺑﺮام اﻻﺗﻔﺎﻗﻴﺎت وﻣﺬﻛﺮات اﻟﺘﻔﺎﻫﻢ واﻟﺘﻨﺴﻴﻖ‬.١٥
understanding, coordination, cooperation and exchange of ‫واﻟﺘﻌﺎون وﺗﺒﺎدل اﳋﺒﺮات ﻣﻊ اﳉﻬﺎت اﻟﺪوﻟﻴﺔ ذات اﻟﺼﻠﺔ‬
experiences with international bodies related to the work of ‫ﺑﻌﻤﻞ اﳌﺮﻛﺰ وﻓﻘﺎ ﻟﻠﻘﻮاﻋﺪ واﻹﺟﺮاءات اﳌﻘﺮرة ﻓـﻲ ﻫﺬا‬
the Centre in accordance with the established rules and .‫اﻟﺸﺄن‬
procedures. ‫ إﺻﺪار اﻟﺪورﻳﺎت اﳋﺎﺻﺔ ﺑﺘﺤﺪﻳﺚ إﺟﺮاءات اﳊﻤﺎﻳﺔ‬.١٦
16. Issue periodicals to update protection measures in ‫ﲟﺎ ﻳﺘﻮاﻓﻖ ﻣﻊ أﻧﺸﻄﺔ اﻟﻘﻄﺎﻋﺎت اﳌﺨﺘﻠﻔﺔ وﺗﻮﺻﻴﺎت اﳌﺮﻛﺰ‬
consistent with the activities of various sectors and the .‫ﻓـﻲ ﺷﺄﻧﻬﺎ‬
recommendations of the Centre regarding them.
‫ إﻋﺪاد وإﺻﺪار ﺗﻘﺮﻳﺮ ﺳﻨﻮي ﻋﻦ ﺣﺎﻟﺔ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬.١٧
Prepare and publish an annual report on the status of
.‫اﻟﺸﺨﺼﻴﺔ ﻓـﻲ ﺟﻤﻬﻮرﻳﺔ ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ‬
personal data protection in the Arab Egypt of Egypt.

٢١
 Article 20 ٢٠ ‫اﳌﺎدة‬

The Centre shall have a board of directors formed and ،‫ ﻳﺸﻜﻞ ﺑﺮﺋﺎﺳﺔ اﻟﻮزﻳﺮ اﳌﺨﺘﺺ‬،‫ﻳﻜﻮن ﻟﻠﻤﺮﻛﺰ ﻣﺠﻠﺲ إدارة‬
spearheaded by the concerned Minister as follows: :‫وﻋﻀﻮﻳﺔ ﻛﻞ ﻣﻦ‬
1. A representative of the Ministry of Defense
.‫ ﳑﺜﻞ ﻋﻦ وزارة اﻟﺪﻓﺎع ﻳﺨﺘﺎره وزﻳﺮ اﻟﺪﻓﺎع‬.١
2. A representative of the Ministry of Interior
.‫ ﳑﺜﻞ ﻋﻦ وزارة اﻟﺪاﺧﻠﻴﺔ ﻳﺨﺘﺎره وزﻳﺮ اﻟﺪاﺧﻠﻴﺔ‬.٢
3. A representative of the General Intelligence Agency ,
‫ ﳑﺜﻞ ﻋﻦ ﺟﻬﺎز اﳌﺨﺎﺑﺮات اﻟﻌﺎﻣﺔ ﻳﺨﺘﺎره رﺋﻴﺲ‬.٣
nominated by the Head of the Agency .
.‫اﳉﻬﺎز‬
4. A representative of the Administrative Control Authority
.‫ ﳑﺜﻞ ﻋﻦ ﻫﻴﺌﺔ اﻟﺮﻗﺎﺑﺔ اﻹدارﻳﺔ ﻳﺨﺘﺎره رﺋﻴﺲ اﻟﻬﻴﺌﺔ‬.٤
5. A representative of the development of the information
technology industry ‫ ﳑﺜﻞ ﻋﻦ ﻫﻴﺌﺔ ﺗﻨﻤﻴﺔ ﺻﻨﺎﻋﺔ ﺗﻜﻨﻮﻟﻮﺟﻴﺎ اﳌﻌﻠﻮﻣﺎت‬.٥
6. A representative of the National Communications .‫ﻳﺨﺘﺎره رﺋﻴﺲ ﻣﺠﻠﺲ إدارة اﻟﻬﻴﺌﺔ‬
Regulatory Authority ‫ ﳑﺜﻞ ﻋﻦ اﳉﻬﺎز اﻟﻘﻮﻣﻲ ﻟﺘﻨﻈﻴﻢ اﻻﺗﺼﺎﻻت ﻳﺨﺘﺎره‬.٦
7. The Centre’s Executive Chief Officer .‫رﺋﻴﺲ ﻣﺠﻠﺲ إدارة اﳉﻬﺎز‬
8. Three experts nominated by the concerned minister .‫ اﻟﺮﺋﻴﺲ اﻟﺘﻨﻔﻴﺬي ﻟﻠﻤﺮﻛﺰ‬.٧
membership duration shall be three years, renewable, and .‫ ﺛﻼﺛﺔ ﻣﻦ ذوي اﳋﺒﺮة ﻳﺨﺘﺎرﻫﻢ اﻟﻮزﻳﺮ اﳌﺨﺘﺺ‬.٨
its composition and the financial provisions of its members ‫وﺗﻜﻮن ﻣﺪة ﻋﻀﻮﻳﺔ ﻣﺠﻠﺲ اﻹدارة ﺛﻼث ﺳﻨﻮات ﻗﺎﺑﻠﺔ‬
shall be issued by a decree of the Prime Minister. ‫ وﲢﺪﻳﺪ اﳌﻌﺎﻣﻠﺔ اﳌﺎﻟﻴﺔ‬،‫ وﻳﺼﺪر ﺑﺘﺸﻜﻴﻠﻪ‬،‫ﻟﻠﺘﺠﺪﻳﺪ‬
The Board of Directors may form from among of its .‫ﻷﻋﻀﺎﺋﻪ ﻗﺮار ﻣﻦ رﺋﻴﺲ ﻣﺠﻠﺲ اﻟﻮزراء‬
members, one or more committees to be temporarily ‫وﳌﺠﻠﺲ اﻹدارة أن ﻳﺸﻜﻞ ﻣﻦ ﺑﲔ أﻋﻀﺎﺋﻪ ﳉﻨﺔ أو أﻛﺜﺮ‬
entrusted with certain functions, and the Board may ‫ وﻟﻠﻤﺠﻠﺲ أن ﻳﻔﻮض‬،‫ﻳﻌﻬﺪ إﻟﻴﻬﺎ ﺑﺼﻔﺔ ﻣﺆﻗﺘﺔ ﺑﺒﻌﺾ اﳌﻬﺎم‬
delegate the Chairman or the Chief Executive Officer of the ‫رﺋﻴﺲ ﻣﺠﻠﺲ اﻹدارة أو اﻟﺮﺋﻴﺲ اﻟﺘﻨﻔﻴﺬي ﻟﻠﻤﺮﻛﺰ ﻓـﻲ‬
Centre with some of its competences
.‫ﺑﻌﺾ اﺧﺘﺼﺎﺻﺎﺗﻪ‬

Article 21 ٢١ ‫اﳌﺎدة‬
The Board of Directors of the Centre is the dominant ‫ﻣﺠﻠﺲ إدارة اﳌﺮﻛﺰ ﻫﻮ اﻟﺴﻠﻄﺔ اﳌﻬﻴﻤﻨﺔ ﻋﻠﻰ ﺷﺌﻮﻧﻪ‬
authority in its affairs and directing its specialties, it takes the ‫ وﻟﻪ أن ﻳﺘﺨﺬ ﻣﺎ ﻳﺮاه ﻻزﻣﺎ ﻣﻦ‬،‫وﻣﺒﺎﺷﺮة اﺧﺘﺼﺎﺻﺎﺗﻪ‬
necessary decisions to fulfill the purpose of the Centre , law
‫ﻗﺮارات ﻟﺘﺤﻘﻴﻖ أﻏﺮاض اﳌﺮﻛﺰ واﻟﻘﺎﻧﻮن وﻻﺋﺤﺘﻪ اﻟﺘﻨﻔﻴﺬﻳﺔ‬
and its execution regulation, in particular,:
:‫وﻟﻪ ﻋﻠﻰ اﻷﺧﺺ ﻣﺎ ﻳﺄﺗﻲ‬
1. Adopt policies, strategic plans and all programs required
to protect personal data. ‫ إﻗﺮار اﻟﺴﻴﺎﺳﺎت واﳋﻄﻂ اﻻﺳﺘﺮاﺗﻴﺠﻴﺔ واﻟﺒﺮاﻣﺞ‬.١
2. Establish regulations and standards related to personal .‫اﻟﻼزﻣﺔ ﳊﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
data protection. ‫ اﻋﺘﻤﺎد اﻟﻠﻮاﺋﺢ واﻟﻀﻮاﺑﻂ واﻟﺘﺪاﺑﻴﺮ واﳌﻌﺎﻳﻴﺮ اﳋﺎﺻﺔ‬.٢
3. Establish international cooperation plans and exchange .‫ﺑﺤﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
expertise with international entities. ‫ اﻋﺘﻤﺎد ﺧﻄﻂ اﻟﺘﻌﺎون اﻟﺪوﻟﻲ وﺗﺒﺎدل اﳋﺒﺮات ﻣﻊ‬.٣
4. Establish organizational charter, financial and .‫اﳉﻬﺎت واﳌﻨﻈﻤﺎت اﻟﺪوﻟﻴﺔ‬
administrative regulation, human resources and annual ‫ اﻋﺘﻤﺎد اﻟﻬﻴﻜﻞ اﻟﺘﻨﻈﻴﻤﻲ واﻟﻠﻮاﺋﺢ اﳌﺎﻟﻴﺔ واﻹدارﻳﺔ‬.٤
budget of the Centre . .‫واﳌﻮارد اﻟﺒﺸﺮﻳﺔ واﳌﻮازﻧﺔ اﻟﺴﻨﻮﻳﺔ ﻟﻠﻤﺮﻛﺰ‬
5. Approve the establishment of offices or branches across ‫ اﳌﻮاﻓﻘﺔ ﻋﻠﻰ إﻧﺸﺎء ﻣﻜﺎﺗﺐ أو ﻓﺮوع ﻟﻠﻤﺮﻛﺰ ﻋﻠﻰ ﻣﺴﺘﻮى‬.٥
the Republic.. .‫اﳉﻤﻬﻮرﻳﺔ‬
Accept grants, contributions, and donations for the purpose ‫ ﻗﺒﻮل اﳌﻨﺢ واﻟﺘﺒﺮﻋﺎت واﻟﻬﺒﺎت اﻟﻼزﻣﺔ ﻟﺘﺤﻘﻴﻖ أﻏﺮاض‬.٦
of the Centre, after obtaining the legally required approvals. .‫اﳌﺮﻛﺰ ﺑﻌﺪ اﳊﺼﻮل ﻋﻠﻰ اﳌﻮاﻓﻘﺎت اﳌﺘﻄﻠﺒﺔ ﻗﺎﻧﻮﻧﺎ‬

٢٢
 Article 22 ٢٢ ‫اﳌﺎدة‬

The Centre ’s Board of Directors shall meet upon the ‫ﻳﺠﺘﻤﻊ ﻣﺠﻠﺲ إدارة اﳌﺮﻛﺰ ﺑﺪﻋﻮة ﻣﻦ رﺋﻴﺴﻪ ﻣﺮة ﻋﻠﻰ‬
invitation of its chairman at least once a month and
‫ وﻳﻜﻮن اﺟﺘﻤﺎﻋﻪ‬،‫ وﻛﻠﻤﺎ دﻋﺖ اﳊﺎﺟﺔ ﻟﺬﻟﻚ‬،‫اﻷﻗﻞ ﻛﻞ ﺷﻬﺮ‬
whenever required. The meeting shasll be valid by the
attendance of the majority. All of the Centre ’s decisions ‫ وﺗﺼﺪر ﻗﺮاراﺗﻪ ﺑﺄﻏﻠﺒﻴﺔ‬،‫ﺻﺤﻴﺤﺎ ﺑﺤﻀﻮر أﻏﻠﺒﻴﺔ أﻋﻀﺎﺋﻪ‬
shall be issued by a majority of two-thirds of the attended ‫ وﻟﻠﺮﺋﻴﺲ أن ﻳﺪﻋﻮ ﻣﻦ‬،‫ﺛﻠﺜﻲ أﺻﻮات اﻷﻋﻀﺎء اﳊﺎﺿﺮﻳﻦ‬
members. , the Chairman shall invite whoever he sees
.‫ﻳﺮى ﳊﻀﻮر اﻻﺟﺘﻤﺎع دون أن ﻳﻜﻮن ﻟﻪ ﺻﻮت ﻣﻌﺪود‬
appropriate to attend the meeting without having a
counted vote.

Article 23 ٢٣ ‫اﳌﺎدة‬

The Centre shall have a Chairman, assigned by adecree ‫ ﻳﺼﺪر ﺑﺘﻌﻴﻴﻨﻪ وﲢﺪﻳﺪ‬،‫ﻳﻜﻮن ﻟﻠﻤﺮﻛﺰ رﺋﻴﺲ ﺗﻨﻔﻴﺬي‬
issued by the Prime Minister upon the competent
‫ﻣﻌﺎﻣﻠﺘﻪ اﳌﺎﻟﻴﺔ ﻗﺮار ﻣﻦ رﺋﻴﺲ ﻣﺠﻠﺲ اﻟﻮزراء ﺑﻨﺎء ﻋﻠﻰ‬
minister’s recommendation.
‫اﻗﺘﺮاح اﻟﻮزﻳﺮ اﳌﺨﺘﺺ ﳌﺪة أرﺑﻊ ﺳﻨﻮات ﻗﺎﺑﻠﺔ ﻟﻠﺘﺠﺪﻳﺪ ﳌﺮة‬
The Chairman shall be responsible before the board of
directors for technical, administrative and financial .‫واﺣﺪة‬
functioning of the Centre and shall represent it before ‫وﻳﻜﻮن ﻣﺴﺌﻮﻻ أﻣﺎم ﻣﺠﻠﺲ اﻹدارة ﻋﻦ ﺳﻴﺮ أﻋﻤﺎل اﳌﺮﻛﺰ‬
others and before the courts., In this regard, shall have the ‫ وﳝﺜﻠﻪ ﻓـﻲ ﺻﻼﺗﻪ ﺑﺎﻟﻐﻴﺮ وأﻣﺎم‬،‫ﻓﻨﻴﺎ وإدارﻳﺎ وﻣﺎﻟﻴﺎ‬
power to: :‫اﻟﻘﻀﺎء وﻟﻪ ﻋﻠﻰ اﻷﺧﺺ ﻣﺎ ﻳﺄﺗﻲ‬
1- Supervise the execution of the board’s decisions.
.‫ اﻹﺷﺮاف ﻋﻠﻰ ﺗﻨﻔﻴﺬ ﻗﺮارات ﻣﺠﻠﺲ اﻹدارة‬.١
2- Manage and supervise the Centre and the progress of
‫ وﺗﺼﺮﻳﻒ‬،‫ إدارة اﳌﺮﻛﺰ واﻹﺷﺮاف ﻋﻠﻰ ﺳﻴﺮ اﻟﻌﻤﻞ ﺑﻪ‬.٢
its affairs
3- Submit periodic reports to the Board of Directors on .‫ﺷﺌﻮﻧﻪ‬
the Centre ’s activities, progress of work, and what has ‫ ﻋﺮض ﺗﻘﺎرﻳﺮ دورﻳﺔ ﻋﻠﻰ ﻣﺠﻠﺲ اﻹدارة ﻋﻦ ﻧﺸﺎط‬.٣
been accomplished in accordance with the set goals, plans ‫اﳌﺮﻛﺰ وﺳﻴﺮ اﻟﻌﻤﻞ ﺑﻪ وﻣﺎ ﰎ إﳒﺎزه وﻓﻘﺎ ﻟﻸﻫﺪاف‬
and programs, and identify obstacles that impede its ،‫ وﲢﺪﻳﺪ ﻣﻌﻮﻗﺎت اﻷداء‬،‫واﳋﻄﻂ واﻟﺒﺮاﻣﺞ اﳌﻮﺿﻮﻋﺔ‬
performance, and propose solutions to avoid them.
.‫واﳊﻠﻮل اﳌﻘﺘﺮﺣﺔ ﻟﺘﻔﺎدﻳﻬﺎ‬
4- Exerciseg other functions set forth in the Centre 's
‫ ﳑﺎرﺳﺔ اﻻﺧﺘﺼﺎﺻﺎت اﻷﺧﺮى اﻟﺘﻲ ﲢﺪدﻫﺎ ﻟﻮاﺋﺢ‬.٤
bylaws.
5- Take all necessary measures to implement all of the .‫اﳌﺮﻛﺰ‬
Centre 's tasks and terms of reference as mentioned in ‫ اﺗﺨﺎذ ﻛﻞ ﻣﺎ ﻳﻠﺰم ﻹﻧﻔﺎذ ﺟﻤﻴﻊ ﻣﻬﺎم اﳌﺮﻛﺰ‬.٥
Article (21) of this law. .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٢١) ‫واﺧﺘﺼﺎﺻﺎﺗﻪ اﻟﻮاردة ﻓـﻲ اﳌﺎدة‬
The Chairman shall be assisted in carrying out his ‫وﻳﻌﺎون اﻟﺮﺋﻴﺲ اﻟﺘﻨﻔﻴﺬي ﻓـﻲ ﻣﺒﺎﺷﺮة اﺧﺘﺼﺎﺻﺎﺗﻪ ﻋﺪد‬
responsibilities by a sufficient number of experts,
‫ﻛﺎف ﻣﻦ اﳋـــــــﺒﺮاء واﻟﻔﻨﻴﲔ واﻹدارﻳــــــﲔ وﻓﻘﺎ ﻟﻠﻬﻴﻜﻞ‬
technicians and administrators upon the organizational
.‫اﻟﺘﻨﻈﻴﻤﻲ ﻟﻠﻤﺮﻛﺰ‬
structure of the Centre .

٢٣
 Article 24 ٢٤ ‫اﳌﺎدة‬

The members of the Centre ’s Board of Directors, and its ،‫ﻳﺤﻈﺮ ﻋﻠﻰ أﻋﻀﺎء ﻣﺠﻠﺲ إدارة اﳌﺮﻛﺰ واﻟﻌﺎﻣﻠﲔ ﺑﻪ‬
employees are prohibited from disclosing any documents
‫إﻓﺸﺎء أي وﺛﺎﺋﻖ أو ﻣﺴﺘﻨﺪات أو ﺑﻴﺎﻧﺎت ﺗﺘﻌﻠﻖ ﺑﺎﳊﺎﻻت‬
or data related to the cases that the Centre supervises or
examines or that are presented or disseminated during ‫اﻟﺘﻲ ﻳﻘﻮم اﳌﺮﻛﺰ ﺑﺮﻗﺎﺑﺘﻬﺎ أو ﻓﺤﺼﻬﺎ أو اﻟﺘﻲ ﻳﺘﻢ ﺗﻘﺪﳝﻬﺎ‬

the examination or issuance of decisions related to them. ،‫أو ﺗﺪاوﻟﻬﺎ أﺛﻨﺎء ﻓﺤﺺ أو إﺻﺪار اﻟﻘﺮارات اﳋﺎﺻﺔ ﺑﻬﺎ‬
this obligation survives as an obligation after the .‫وﻳﻈﻞ ﻫﺬا اﻻﻟﺘﺰام ﻗﺎﺋﻤﺎ ﺑﻌﺪ اﻧﺘﻬﺎء اﻟﻌﻼﻗﺔ ﺑﺎﳌﺮﻛﺰ‬
termination of the relationship with the Centre .
‫ ﻻ ﻳﺠﻮز اﻹﻓﺼـــــﺎح ﻋﻦ اﳌﻌﻠﻮﻣﺎت‬،‫وﻓـﻲ ﺟﻤﻴﻊ اﻷﺣﻮال‬
In all cases, the information, instruments, documents and
data referred to in this article may not be disclosed except ‫واﻟﻮﺛﺎﺋﻖ واﳌﺴﺘﻨﺪات واﻟﺒﻴﺎﻧﺎت اﳌﺸﺎر إﻟﻴﻬﺎ ﻓـﻲ ﻫﺬه اﳌﺎدة‬

to investigation and judicial authorities and bodies. .‫إﻻ ﻟﺴﻠﻄﺎت اﻟﺘﺤﻘﻴﻖ واﳉﻬﺎت واﻟﻬﻴﺌﺎت اﻟﻘﻀﺎﺋﻴﺔ‬

Article 25 ٢٥ ‫اﳌﺎدة‬

In a cooperation with competent authorities, the Centre ‫ﻟﻠﻤﺮﻛﺰ ﺑﺎﻟﺘﻨﺴﻴﻖ ﻣﻊ اﻟﺴﻠﻄﺎت اﳌﺨﺘﺼﺔ اﻟﺘﻌﺎون ﻣﻊ ﻧﻈﺮاﺋﻪ‬
may collaborate with its counterparties in foreign
‫ﺑﺎﻟﺒﻼد اﻷﺟﻨﺒﻴﺔ وذﻟﻚ ﻓـﻲ إﻃﺎر اﺗﻔﺎﻗﻴﺎت اﻟﺘﻌﺎون اﻟﺪوﻟﻴﺔ‬
countries within the framework of international, regional
and bilateral cooperation agreements or cooperation ‫واﻹﻗﻠﻴﻤﻴﺔ واﻟﺜﻨﺎﺋﻴﺔ أو ﺑﺮوﺗﻮﻛﻮﻻت اﻟﺘﻌﺎون اﳌﺼﺪق ﻋﻠﻴﻬﺎ‬
protocols or as an application to the principle of ‫أو ﺗﻄﺒﻴﻘﺎ ﳌﺒﺪأ اﳌﻌﺎﻣﻠﺔ ﺑﺎﳌﺜﻞ ﲟﺎ ﻣﻦ ﺷﺄﻧﻪ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬
reciprocity including protecting personal data and
‫اﻟﺸﺨﺼﻴﺔ واﻟﺘﺤﻘﻖ ﻣﻦ ﻣﺪى اﻻﻣﺘﺜﺎل ﻟﻠﻘﺎﻧﻮن ﻣﻦ ﻗﺒﻞ‬
verification of compliance with the law by outside the
Republic . ‫ وﻳﻌﻤﻞ اﳌﺮﻛﺰ ﻋﻠﻰ‬،‫اﳌﺘﺤﻜﻤﲔ واﳌﻌﺎﳉﲔ ﺧﺎرج اﳉﻤﻬﻮرﻳﺔ‬
In addition, the Centre exchanges the data and
‫ﺗﺒﺎدل اﻟﺒﻴﺎﻧﺎت واﳌﻌﻠﻮﻣﺎت ﲟﺎ ﻣﻦ ﺷﺄﻧﻪ أن ﻳﻜﻔﻞ ﺣﻤﺎﻳﺔ‬
information in order to guarantee the protection for
‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ وﻋﺪم اﻧﺘﻬﺎﻛﻬﺎ واﳌﺴﺎﻋﺪة ﻓـﻲ اﻟﺘﺤﻘﻴﻖ‬
personal data, and help in investigations concerning
violations and related crimes. .‫ﻓـﻲ اﻻﻧﺘﻬﺎﻛﺎت واﳉﺮاﺋﻢ ذات اﻟﺼﻠﺔ وﺗﺘﺒﻊ ﻣﺮﺗﻜﺒﻴﻬﺎ‬

٢٤
 Chapter - 10 ‫اﻟﻔﺼﻞ اﻟﻌﺎﺷﺮ‬
License, permits and credits "‫"اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات‬

FIRST: Types of license, ‫ أﻧﻮاع اﻟﺘﺮاﺧﻴﺺ‬:‫أوﻻ‬

permits and accreditations ‫واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات‬

Article 26 ٢٦ ‫اﳌﺎدة‬

The Centre shall issue license, permits or accreditation ‫ﻳﺼﺪر اﳌﺮﻛﺰ اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ أو اﻻﻋﺘﻤﺎدات ﻋﻠﻰ‬
as follows: :‫اﻟﻨﺤﻮ اﻵﺗﻲ‬
1. The Centre classifies the license, permits and ‫ ﻳﻘﻮم اﳌﺮﻛﺰ ﺑﺘﺼﻨﻴﻒ اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ‬.١
accreditations and determines their types, and provides ‫ ووﺿﻊ اﻟﺸﺮوط اﳋﺎﺻﺔ‬،‫واﻻﻋﺘﻤﺎدات وﲢﺪﻳﺪ أﻧﻮاﻋﻬﺎ‬
the terms needed to grant each according to the executive ‫ وذﻟﻚ وﻓﻘﺎ ﳌﺎ ﲢﺪده اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ‬،‫ﲟﻨﺢ ﻛﻞ ﻧﻮع ﻣﻨﻬﺎ‬
.‫ﻟﻬﺬا اﻟﻘﺎﻧﻮن‬
regulation of this law.
2. Issue licenses and permits for controller and processor ‫ إﺻﺪار اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ ﻟﻠﻤﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ‬.٢
‫ واﻟﺘﻌﺎﻣﻞ ﻋﻠﻴﻬﺎ وﻣﻌﺎﳉﺘﻬﺎ‬،‫ﻹﺟﺮاء ﻋﻤﻠﻴﺎت ﺣﻔﻆ اﻟﺒﻴﺎﻧﺎت‬
to save data and deal with it according to this law.
.‫وﻓﻘﺎ ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
3. Issue licenses and permits concerning digital
‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ اﳋﺎﺻﺔ ﺑﺎﻟﺘﺴﻮﻳﻖ‬.٣
marketing .‫اﻹﻟﻜﺘﺮوﻧﻲ اﳌﺒﺎﺷﺮ‬
4. Issue licenses and permits concerning the data
‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ اﳋﺎﺻﺔ ﺑﺎﳌﻌﺎﳉﺎت‬.٤
examination of members in associations, syndicates and ‫اﻟﺘﻲ ﺗﻘﻮم ﺑﻬﺎ اﳉﻤﻌﻴﺎت أو اﻟﻨﻘﺎﺑﺎت أو اﻟﻨﻮادي ﻟﻠﺒﻴﺎﻧﺎت‬
clubs. .‫اﻟﺸﺨﺼﻴﺔ ﻷﻋﻀﺎء ﺗﻠﻚ اﳉﻬﺎت وﻓﻰ إﻃﺎر أﻧﺸﻄﺘﻬﺎ‬
5. Issue licenses and permits concerning visual ‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ اﳋﺎﺻﺔ ﺑﻮﺳﺎﺋﻞ‬.٥
monitoring of public places. .‫اﳌﺮاﻗﺒﺔ اﻟﺒﺼﺮﻳﺔ ﻓـﻲ اﻷﻣﺎﻛﻦ اﻟﻌﺎﻣﺔ‬
6. Issue licenses and permits concerning the examination ‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ أو اﻟﺘﺼﺎرﻳﺢ اﳋﺎﺻﺔ ﺑﺎﻟﺘﺤﻜﻢ‬.٦
of sensitive personal data. .‫وﻣﻌﺎﳉﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ اﳊﺴﺎﺳﺔ‬
7. Issue licenses and permits concerning entities and ‫ إﺻﺪار اﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات اﳋﺎﺻﺔ ﺑﺎﳉﻬﺎت‬.٧
persons who provide consultation for the procedures of ‫واﻷﻓﺮاد اﻟﺘﻲ ﺗﺘﻴﺢ ﻟﻬﻢ ﺗﻘﺪﱘ اﻻﺳﺘﺸﺎرات ﻓـﻲ إﺟﺮاءات‬
First Article .‫ وإﺟﺮاءات اﻻﻣﺘﺜﺎل ﻟﻬﺎ‬،‫ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
personal data protection.
‫ إﺻﺪار اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ اﳋﺎﺻﺔ ﺑﻨﻘﻞ اﻟﺒﻴﺎﻧﺎت‬.٨
8. Issue licenses and permits concerning transmitting
.‫اﻟﺸﺨﺼﻴﺔ ﻋﺒﺮ اﳊﺪود‬
personal data across the borders.
‫وﲢﺪد اﻟﻼﺋﺤﺔ اﻟﺘﻨﻔﻴﺬﻳﺔ ﻟﻬﺬا اﻟﻘﺎﻧﻮن أﻧﻮاع ﻫﺬه‬
The executive regulation determines the types, categories
،‫اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات وﻓﺌﺎﺗﻬﺎ وﻣﺴﺘﻮﻳﺎﺗﻬﺎ‬
and levels of such license and permits, and also the ‫وإﺟﺮاءات وﺷﺮوط إﺻﺪارﻫﺎ وﲡﺪﻳﺪﻫﺎ وﳕﺎذﺟﻬﺎ‬
procedures and terms of their issuance, this is in return ‫ وذﻟﻚ ﲟﻘﺎﺑﻞ رﺳﻮم ﻻ ﺗﺘﺠﺎوز ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ‬،‫اﳌﺴﺘﺨﺪﻣﺔ‬
for fees that do not exceed two million Egyptian pound, ‫ وﻣﺒﻠﻎ ﻻ ﻳﺘﺠﺎوز ﺧﻤﺴﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ‬،‫ﺑﺎﻟﻨﺴﺒﺔ ﻟﻠﺘﺮﺧﻴﺺ‬
in addition to five hundred thousand for license. .‫ﻟﻠﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد‬

٢٥
 SECOND: Procedures for Issuing ‫ إﺟﺮاءات إﺻﺪار اﻟﺘﺮاﺧﻴﺺ‬-‫ﺛﺎﻧﻴﺎ‬
Licenses, Permits and Accreditations ‫واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات‬

Article 27 ٢٧ ‫اﳌﺎدة‬
Applications for License, permits and accreditations are ‫ﺗﻘﺪم ﻃﻠﺒﺎت اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات ﻋﻠﻰ‬
to be submitted according to the form provided by the
‫اﻟﻨﻤﺎذج اﻟﺘﻲ ﻳﻀﻌﻬﺎ اﳌﺮﻛﺰ ﻣﺸﻔﻮﻋﺔ ﺑﺠﻤﻴﻊ اﳌﺴﺘﻨﺪات‬
Centre, enclosing all requested documents and
information, with a proof that the applicant has a ‫ ﻣﻊ ﺗﻘﺪﱘ ﻣﺎ ﻳﺜﺒﺖ ﻗﺪرة اﳌﺘﻘﺪم‬،‫واﳌﻌﻠﻮﻣﺎت اﻟﺘﻲ ﻳﺤﺪدﻫﺎ‬
financial ability to provide and implement the requested ‫اﳌﺎﻟﻴﺔ وﻗﺪرﺗﻪ ﻋﻠﻰ ﺗﻮﻓﻴﺮ وﺗﻨﻔﻴﺬ اﳌﺘﻄﻠﺒﺎت واﳌﻌﺎﻳﻴﺮ اﻟﻔﻨﻴﺔ‬
requirements and technical standards. ‫ وﻳﺒﺖ ﻓـﻲ اﻟﻄﻠﺐ ﺧﻼل ﻣﺪة ﻻ ﲡﺎوز ﺗﺴﻌﲔ ﻳﻮﻣﺎ‬،‫اﳌﻘﺮرة‬
The application shall be decided upon within time ‫ﻣﻦ ﺗﺎرﻳﺦ اﺳﺘﻴﻔﺎﺋﻪ ﳉﻤﻴﻊ اﳌﺴﺘﻨﺪات واﳌﻌﻠﻮﻣﺎت وإﻻ‬
duration that does not exceed 90 days from the date that .‫اﻋﺘﺒﺮ اﻟﻄﻠﺐ ﻣﺮﻓﻮﺿﺎ‬
the applicant met all the needed requirements and ‫وﻳﺠﻮز ﻟﻠﻤﺮﻛﺰ ﻃﻠﺐ ﺑﻴﺎﻧﺎت أو وﺛﺎﺋﻖ أو ﻣﺴﺘﻨﺪات أﺧﺮى‬
information.
The Centre may request other data, documents or ‫ ﻛﻤﺎ ﻳﻜﻮن ﻟﻪ اﳊﻖ ﻓـﻲ ﻃﻠﺐ ﺗﻮﻓﻴﺮ‬،‫ﻟﻠﺒﺖ ﻓـﻲ اﻟﻄﻠﺐ‬
records, and shall have the right to request providing ‫ﺿﻤﺎﻧﺎت إﺿﺎﻓﻴﺔ ﳊﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ إذا ﺗﺒﲔ‬
guarantees. .‫ﻋﺪم ﻛﻔﺎﻳﺔ اﳊﻤﺎﻳﺔ اﳌﺒﻴﻨﺔ ﺑﺎﳌﺴﺘﻨﺪات اﳌﻘﺪﻣﺔ إﻟﻴﻪ‬
The controller or processor may also obtain more than ‫ﻛﻤﺎ ﻳﺠﻮز ﻟﻠﻤﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ اﳊﺼﻮل ﻋﻠﻰ أﻛﺜﺮ ﻣﻦ‬
one license or permit depending on the type of personal ‫ﺗﺮﺧﻴﺺ أو ﺗﺼﺮﻳﺢ وﻓﻘﺎ ﻟﻨﻮﻋﻴﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
data being processed. .‫اﳌﺘﻌﺎﻣﻞ ﻋﻠﻴﻬﺎ‬

THIRD: Amending the Terms ‫ ﺗﻌﺪﻳﻞ ﺷﺮوط‬-‫ﺛﺎﻟﺜﺎ‬

of License and Permits ‫اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ‬

Article 28 ٢٨ ‫اﳌﺎدة‬

The centre may amend the terms of license and permits ‫ ﺗﻌﺪﻳﻞ‬،‫ وﻓﻘﺎ ﻻﻋﺘﺒﺎرات اﳌﺼﻠﺤﺔ اﻟﻌﺎﻣﺔ‬،‫ﻳﺠﻮز ﻟﻠﻤﺮﻛﺰ‬
after their issuance in the following conditions: ‫ﺷﺮوط اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ ﺑﻌﺪ إﺻﺪاره ﻓـﻲ أي ﻣﻦ‬
:‫اﳊﺎﻻت اﻵﺗﻴﺔ‬
First Article
1. Responding to international and regional convention
‫ اﻻﺳﺘﺠﺎﺑﺔ إﻟﻰ اﻻﺗﻔﺎﻗﻴﺎت اﻟﺪوﻟﻴﺔ أو اﻹﻗﻠﻴﻤﻴﺔ أو اﻟﻘﻮاﻧﲔ‬.١
or to national related laws. .‫اﻟﻮﻃﻨﻴﺔ ذات اﻟﺼﻠﺔ‬
2. At the request of the licensee.
.‫ ﺑﻨﺎء ﻋﻠﻰ ﻃﻠﺐ اﳌﺮﺧﺺ ﻟﻪ‬.٢
3. The merge of the controller or processor with others
inside or outside the Arab Republic of Egypt. ‫ اﻧﺪﻣﺎج اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﻣﻊ آﺧﺮﻳﻦ داﺧﻞ ﺟﻤﻬﻮرﻳﺔ‬.٣
4. If the amendment is necessary to achieve the objectives .‫ﻣﺼﺮ اﻟﻌﺮﺑﻴﺔ أو ﺧﺎرﺟﻬﺎ‬
of this law.
.‫ إذا ﻛﺎن اﻟﺘﻌﺪﻳﻞ ﺿﺮورﻳﺎ ﻟﺘﺤﻘﻴﻖ أﻫﺪاف ﻫﺬا اﻟﻘﺎﻧﻮن‬.٤

٢٦
 FOURTH: Revoke the License, ‫ إﻟﻐﺎء اﻟﺘﺮاﺧﻴﺺ‬-‫راﺑﻌﺎ‬
Permits and Accreditations. ‫واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات‬

Article 29 ٢٩ ‫اﳌﺎدة‬

The Centre may revoke the license after its issuance in ‫ﻳﺠﻮز ﻟﻠﻤﺮﻛﺰ إﻟﻐﺎء اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد ﺑﻌﺪ‬
any of the following situations:
:‫إﺻﺪاره ﻓـﻲ أي ﻣﻦ اﳊﺎﻻت اﻵﺗﻴﺔ‬
1. Violating the terms of license, permit or accreditation.
2. Non-payment of license, permit or accreditation .‫ ﻣﺨﺎﻟﻔﺔ ﺷﺮوط اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد‬.١
renewal fees. ‫ ﻋﺪم ﺳـــــــﺪاد رﺳﻮم ﲡﺪﻳﺪ اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳـــــﺢ‬.٢
3. Non-compliance with the Centre’s decisions repetition. .‫أو اﻻﻋﺘﻤﺎد‬
Repetition of non-compliance to the Centre ’s decrees
.‫ ﺗﻜﺮار ﻋﺪم اﻻﻣﺘﺜﺎل ﻟﻘﺮارات اﳌﺮﻛﺰ‬.٣
and decisions
‫ اﻟﺘﻨﺎزل ﻋﻦ اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد ﻟﻠﻐﻴﺮ‬.٤
4. Waiving the license to others without the Centre ’s
approval. .‫دون ﻣﻮاﻓﻘﺔ اﳌﺮﻛﺰ‬
5. The controller or processor is sentenced to bankruptcy. .‫ ﺻﺪور ﺣﻜﻢ ﺑﺈﻓﻼس اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ‬.٥

FIFTH: Administrative Sanctions ‫ اﳉﺰاءات اﻹدارﻳﺔ‬-‫ﺧﺎﻣﺴﺎ‬

Article 30 ٣٠ ‫اﳌﺎدة‬
Without prejudice to the provisions of civil and criminal ‫ ﻳﻘﻮم‬،‫ﻣﻊ ﻋﺪم اﻹﺧﻼل ﺑﺄﺣﻜﺎم اﳌﺴﺌﻮﻟﻴﺔ اﳌﺪﻧﻴﺔ واﳉﻨﺎﺋﻴﺔ‬
liability, the Chairman of the Centre shall, in the event of
‫ ﻓـﻲ ﺣﺎل ارﺗﻜﺎب أي ﻣﺨﺎﻟﻔﺔ‬،‫اﻟﺮﺋﻴﺲ اﻟﺘﻨﻔﻴﺬي ﻟﻠﻤﺮﻛﺰ‬
any violation of the provisions of this Law, warn the
offender to cease the violation and remove its causes or ‫ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن ﺑﺈﻧﺬار اﳌﺨﺎﻟﻒ ﺑﺎﻟﺘﻮﻗﻒ ﻋﻦ اﳌﺨﺎﻟﻔﺔ‬
effects within a specified period of time, and if the period ‫ ﻓﺈذا‬،‫وإزاﻟﺔ أﺳﺒﺎﺑﻬﺎ أو آﺛﺎرﻫﺎ ﺧﻼل ﻓﺘﺮة زﻣﻨﻴﺔ ﻳﺤﺪدﻫﺎ‬
referred to has elapsed without the content of that ،‫اﻧﻘﻀﺖ اﳌﺪة اﳌﺸﺎر إﻟﻴﻬﺎ دون ﺗﻨﻔﻴﺬ ﻣﻀﻤﻮن ذﻟﻚ اﻹﻧﺬار‬
warning being implemented. The Centre 's board of :‫ﻛﺎن ﳌﺠﻠﺲ إدارة اﳌﺮﻛﺰ أن ﻳﺼﺪر ﻗﺮارا ﻣﺴﺒﺒﺎ ﲟﺎ ﻳﺄﺗﻲ‬
directors shall a issue a reasoned decision by the
following: ‫ اﻹﻧﺬار ﺑﺈﻳﻘﺎف اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد ﺟﺰﺋﻴﺎ‬.١
1. The license is partially .‫أو ﻛﻠﻴﺎ ﳌﺪة ﻣﺤﺪدة‬
First or completely suspended for a
Article
specified period .‫ إﻳﻘﺎف اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد ﺟﺰﺋﻴﺎ أو ﻛﻠﻴﺎ‬.٢
2. Suspend the license, permit or accreditation partially ‫ ﺳﺤﺐ اﻟﺘﺮﺧﻴﺺ أو اﻟﺘﺼﺮﻳﺢ أو اﻻﻋﺘﻤﺎد أو إﻟﻐﺎؤه‬.٣
or completely.
.‫ﺟﺰﺋﻴﺎ أو ﻛﻠﻴﺎ‬
3. suspension of license, permit or accreditation in part or
in full. ‫ ﻧﺸﺮ ﺑﻴﺎن ﺑﺎﳌﺨﺎﻟﻔﺎت اﻟﺘﻲ ﺛﺒﺖ وﻗﻮﻋﻬﺎ ﻓـﻲ وﺳﻴﻠﺔ‬.٤
4. Publishing the statement of the violations that have .‫إﻋﻼم أو أﻛﺜﺮ واﺳﻌﺔ اﻻﻧﺘﺸﺎر ﻋﻠﻰ ﻧﻔﻘﺔ اﳌﺨﺎﻟﻒ‬
been proven in one of media at the expense of the ‫ إﺧﻀﺎع اﳌﺘﺤﻜﻢ أو اﳌﻌﺎﻟﺞ ﻟﻺﺷﺮاف اﻟﻔﻨﻲ ﻟﻠﻤﺮﻛﺰ‬.٥
violator. ‫ﻟﺘﺄﻣﲔ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻋﻠﻰ ﻧﻔﻘﺘﻬﻤﺎ ﺑﺤﺴﺐ‬
Subject the controller or processor to the technical
.‫اﻷﺣﻮال‬
supervision of the Centre to ensure the protection of
personal data at its expense.

٢٧
 CHAPTER - 11 ‫اﻟﻔﺼﻞ اﳊﺎدي ﻋﺸﺮ‬
The Centre’s Budget "‫"ﻣﻮازﻧﺔ اﳌﺮﻛﺰ وﻣﻮارده اﳌﺎﻟﻴﺔ‬
and its Financial Resources

Article 31 ٣١ ‫اﳌﺎدة‬
The Center shall have a special budget to be prepared the ‫ﻳﻜﻮن ﻟﻠﻤﺮﻛﺰ ﻣﻮازﻧﺔ ﺧﺎﺻﺔ ﺗﻌﺪ ﻋﻠﻰ ﳕﻂ ﻣﻮازﻧﺎت‬
same way as the budgets of economic entities in accordance
with the rules set forth in the regulation of the Center. The ‫اﻟﻬﻴﺌﺎت اﻻﻗﺘﺼﺎدﻳﺔ ﻃﺒﻘﺎ ﻟﻠﻘﻮاﻋﺪ اﻟﺘﻲ ﲢﺪدﻫﺎ ﻻﺋﺤﺔ‬
budget shall follow the rules of the uniform accounting ‫ وذﻟﻚ دون‬،‫اﳌﺮﻛﺰ وﺗﺘﺒﻊ ﻗﻮاﻋﺪ اﻟﻨﻈﺎم اﶈﺎﺳﺒﻲ اﳌﻮﺣﺪ‬
system without being restricted with the governmental rules
‫ وﺗﺒﺪأ اﻟﺴﻨﺔ اﳌﺎﻟﻴﺔ‬،‫اﻟﺘﻘﻴﺪ ﺑﺎﻟﻘﻮاﻋﺪ واﻟﻨﻈﻢ اﳊﻜﻮﻣﻴﺔ‬
and systems. The financial year of the Center shall begin
with the beginning of the fiscal year of the State and ends ‫ ﻛﻤﺎ‬،‫ﻟﻠﻤﺮﻛﺰ ﻣﻊ ﺑﺪاﻳﺔ اﻟﺴﻨﺔ اﳌﺎﻟﻴﺔ ﻟﻠﺪوﻟﺔ وﺗﻨﺘﻬﻲ ﺑﻨﻬﺎﻳﺘﻬﺎ‬
with its end. The Center shall have a private banking account ‫ﻳﻜﻮن ﻟﻠﻤﺮﻛﺰ ﺣﺴﺎب ﺧﺎص ﻟﺪى اﻟﺒﻨﻚ اﳌﺮﻛﺰي ﺗﻮدع ﻓﻴﻪ‬
at the Central Bank in which to deposit its resources. The
Center may open an account in its name in one of the ‫ وﻳﺠﻮز ﻟﻪ إﻧﺸﺎء ﺣﺴﺎب ﺑﺎﺳﻤﻪ ﻟﺪى أﺣﺪ اﻟﺒﻨﻮك‬،‫ﻣﻮارده‬
commercial banks upon the approval of the Minister of ‫ وﻳﺮﺣﻞ اﻟﻔﺎﺋﺾ ﻣﻦ‬،‫اﻟﺘﺠﺎرﻳﺔ ﺑﻌﺪ ﻣﻮاﻓﻘﺔ وزﻳﺮ اﳌﺎﻟﻴﺔ‬
Finance. The surplus of the budget shall be carried forward ‫ وﻳﺘﻢ اﻟﺼﺮف ﻣﻦ‬،‫ﻣﻮازﻧﺔ اﳌﺮﻛﺰ ﻣﻦ ﺳﻨﺔ ﻣﺎﻟﻴﺔ إﻟﻰ أﺧﺮى‬
to the following financial year. Disbursement of the
resources shall be in accordance with the financial regulation ‫ﻣﻮارده وﻓﻘﺎ ﻟﻼﺋﺤﺘﻪ اﳌﺎﻟﻴﺔ وذﻟﻚ ﻓـﻲ اﳌﺠﺎﻻت اﻟﺘﻲ‬
in the fields to be determined by its Board of Directors. The :‫ وﺗﺘﻜﻮن ﻣﻮارده ﻣﻦ اﻵﺗﻲ‬،‫ﻳﺤﺪدﻫﺎ ﻣﺠﻠﺲ إدارﺗﻪ‬
resources of the Center shall be formed from the following;
1. The budget allocated from the Information Technology ‫ ﻣﺎ ﻳﺨﺼﺺ ﻟﻪ ﻣﻦ ﻣﻮازﻧﺔ ﻫﻴﺌﺔ ﺗﻨﻤﻴﺔ ﺻﻨﺎﻋﺔ‬.١
Industry Development Agency. .‫ﺗﻜﻨﻮﻟﻮﺟﻴﺎ اﳌﻌﻠﻮﻣﺎت‬
2. The budget allocated from the public treasury, by no ‫ ﻣﺎ ﻳﺨﺼﺺ ﻟﻪ ﻣﻦ اﳋﺰاﻧﺔ اﻟﻌﺎﻣﺔ ﲟﺎ ﻻ ﻳﻘﻞ ﻋﻦ ﺛﻠﺚ‬.٢
less than one third of the outcome from the fines imposed
by the virtue of this law. .‫ﺣﺼﻴﻠﺔ اﻟﻐﺮاﻣﺎت اﳌﻘﻀﻲ ﺑﻬﺎ ﺗﻄﺒﻴﻘﺎ ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
3. The income of the services provided by the Centre . .‫ ﻣﻘﺎﺑﻞ اﳋﺪﻣﺎت اﻟﺘﻲ ﻳﻘﻮم اﳌﺮﻛﺰ ﺑﺘﻘﺪﳝﻬﺎ‬.٣
4. The fees and charges for licenses, permits and
‫ ﻗﻴﻤﺔ رﺳﻮم وﻣﻘﺎﺑﻞ اﻟﺘﺮاﺧﻴﺺ واﻟﺘﺼﺎرﻳﺢ واﻻﻋﺘﻤﺎدات‬.٤
accreditations issued, in addition to the income of
accepted reconciliations. .‫اﻟﺘﻲ ﻳﺘﻢ إﺻﺪارﻫﺎ وﻗﻴﻤﺔ اﻟﺘﺼﺎﳊﺎت اﻟﺘﻲ ﻳﺘﻢ ﻗﺒﻮﻟﻬﺎ‬
5. The income of on investing the Centre 's money. .‫ ﻋﺎﺋﺪ اﺳﺘﺜﻤﺎر أﻣﻮال اﳌﺮﻛﺰ‬.٥
6. The donations and gifts accepted by the Board of
Directors. .‫ ﻣﺎ ﻳﻘﺒﻠﻪ ﻣﺠﻠﺲ اﻹدارة ﻣﻦ اﳌﻨﺢ واﻟﺘﺒﺮﻋﺎت واﻟﻬﺒﺎت‬.٦

CHAPTER - 12 ‫اﻟﻔﺼﻞ اﻟﺜﺎﻧﻲ ﻋﺸﺮ‬

REQUESTS AND COMPLAINTS "‫"اﻟﻄﻠﺒﺎت واﻟﺸﻜﺎوي‬

FIRST: Requests ‫ اﻟﻄﻠﺒﺎت‬-‫أوﻻ‬

Article 32 ٣٢ ‫اﳌﺎدة‬
The Data Subject and each concerned person may apply ‫ﻳﺠﻮز ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت وﻟﻜﻞ ذي ﺻﻔﺔ أن ﻳﺘﻘﺪم‬
to any possessor, controller or processor for the exercise
‫إﻟﻰ أي ﺣﺎﺋﺰ أو ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ ﺑﻄﻠﺐ ﻳﺘﻌﻠﻖ ﲟﻤﺎرﺳﺔ‬
of his or her rights under this Law, and the person to
whom the request is being made shall be committed to ‫ وﻳﻠﺘﺰم اﳌﻘﺪم‬،‫ﺣﻘﻮﻗﻪ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
respond within six working days from the date of ‫إﻟﻴﻪ اﻟﻄﻠﺐ ﺑﺎﻟﺮد ﻋﻠﻴﻪ ﺧﻼل ﺳﺘﺔ أﻳﺎم ﻋﻤﻞ ﻣﻦ ﺗﺎرﻳﺦ‬
submitting the request. .‫ﺗﻘﺪﳝﻪ إﻟﻴﻪ‬

٢٨
 Second: Complaints ‫ اﻟﺸﻜﺎوي‬-‫ﺛﺎﻧﻴﺎ‬

Article 33 ٣٣ ‫اﳌﺎدة‬
Without prejudice to the right to recourse to the judiciary, ‫ ﻳﻜﻮن‬،‫ﻣﻊ ﻋﺪم اﻹﺧﻼل ﺑﺎﳊﻖ ﻓـﻲ اﻟﻠﺠﻮء إﻟﻰ اﻟﻘﻀﺎء‬
the data subject and any person with direct interest shall
‫ﻟﻠﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت وﻟﻜﻞ ذي ﺻﻔﺔ وﻣﺼﻠﺤﺔ ﻣﺒﺎﺷﺮة‬
have the right to complain in the following cases:
1. Violation or breach of the right to protect personal data. :‫ﺣﻖ اﻟﺸﻜﻮى ﻓـﻲ اﳊﺎﻻت اﻵﺗﻴﺔ‬
2. Refrain from enabling the data subject to fulfill or .‫ اﻧﺘﻬﺎك ﺣﻖ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ أو اﻹﺧﻼل ﺑﻪ‬.١
satisfy his or her rights. ‫ اﻻﻣﺘﻨﺎع ﻋﻦ ﲤﻜﲔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻣﻦ‬.٢
Decisions by data officer at the processor or controller .‫اﺳﺘﻴﻔﺎء ﺣﻘﻮﻗﻪ‬
with regard to the submitted requests. ‫ اﻟﻘﺮارات اﻟﺼﺎدرة ﻋﻦ اﳌﺴﺌﻮل ﻋﻦ ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت‬.٣
3. Decisions issued by the responsible person for ‫اﻟﺸﺨﺼﻴﺔ ﻟﺪى اﳌﻌﺎﻟﺞ أو اﳌﺘﺤﻜﻢ ﺑﺸﺄن اﻟﻄﻠﺒﺎت اﳌﻘﺪﻣﺔ‬
protecting the personal data of the processor regarding
‫إﻟﻴﻪ‬
the requests submitted about Complaint shall be
submitted to the Centre, and he may, in this regard, it shall ‫ وﻟﻪ ﻓـﻲ ذﻟﻚ اﺗﺨﺎذ ﻣﺎ ﻳﻠﺰم ﻣﻦ‬،‫وﺗﻘﺪم اﻟﺸﻜﻮى إﻟﻰ اﳌﺮﻛﺰ‬
take the necessary investigation procedures, and he shall ‫ وﻋﻠﻴﻪ أن ﻳﺼﺪر ﻗﺮاره ﺧﻼل ﺛﻼﺛﲔ ﻳﻮم‬،‫إﺟﺮاءات اﻟﺘﺤﻘﻴﻖ‬
issue a decision within thirty working days from the date ‫ ﻋﻠﻰ أن ﻳﺨﻄﺮ اﻟﺸﺎﻛﻲ‬،‫ﻋﻤﻞ ﻣﻦ ﺗﺎرﻳﺦ ﺗﻘﺪﳝﻬﺎ إﻟﻴﻪ‬
of its submission to it. .‫واﳌﺸﻜﻮ ﻓـﻲ ﺣﻘﻪ ﺑﺎﻟﻘﺮار‬
The respondent is committed to execute the decision of ‫وﻳﻠﺘﺰم اﳌﺸﻜﻮ ﻓـﻲ ﺣﻘﻪ ﺑﺘﻨﻔﻴﺬ ﻗﺮار اﳌﺮﻛﺰ ﺧﻼل ﺳﺒﻌﺔ أﻳﺎم‬
the Centre within seven working days as of the date of its ‫ وإﻓﺎدة اﳌﺮﻛﺰ ﲟﺎ ﰎ ﻧﺤﻮ‬،‫ﻋﻤﻞ ﻣﻦ ﺗﺎرﻳﺦ إﺧﻄﺎره ﺑﻪ‬
notification, and to inform the Centre of what has been
.‫ﺗﻨﻔﻴﺬه‬
achieved.

Article-13
Chapter 30 ‫اﻟﻔﺼﻞ اﻟﺜﺎﻟﺚ ﻋﺸﺮ‬
Judicial Police/Control "‫"اﻟﻀﺒﻄﻴﺔ اﻟﻘﻀﺎﺋﻴﺔ‬

Article 34 ٣٤ ‫اﳌﺎدة‬
The Employees of the Centre who are designated by a ‫ﻳﻜﻮن ﻟﻠﻌﺎﻣﻠﲔ ﺑﺎﳌﺮﻛﺰ اﻟﺬﻳﻦ ﻳﺼﺪر ﺑﺘﺤﺪﻳﺪﻫﻢ ﻗﺮار ﻣﻦ‬
decision issued by the Minister of Justice, based on the
‫وزﻳﺮ اﻟﻌـــﺪل ﺑﻨﺎء ﻋﻠﻰ اﻗﺘﺮاح اﻟﻮزﻳــــﺮ اﳌﺨﺘﺺ ﺻﻔﺔ‬
proposal of the concerned minister, shall have the power of
the judicial control First
/police inArticle
proving crimes committed in ‫اﻟﻀﺒﻄﻴﺔ اﻟﻘﻀﺎﺋﻴﺔ ﻓـﻲ إﺛﺒﺎت اﳉﺮاﺋﻢ اﻟﺘﻲ ﺗﻘﻊ ﺑﺎﳌﺨﺎﻟﻔﺔ‬
violation of this law. .‫ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬

Article-30
Chapter 14 ‫اﻟﻔﺼﻞ اﻟﺮاﺑﻊ ﻋﺸﺮ‬
Offences and Sanctions "‫"اﳉﺮاﺋﻢ واﻟﻌﻘﻮﺑﺎت‬

Article 35 ٣٥ ‫اﳌﺎدة‬

Without prejudice to any more severe sentence stipulated ‫ﻣﻊ ﻋﺪم اﻹﺧﻼل ﺑﺄي ﻋﻘﻮﺑﺔ أﺷﺪ ﻣﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ أي‬
in any other law, and without prejudice to the right of the ،‫ وﻣﻊ ﻋﺪم اﻹﺧﻼل ﺑﺤﻖ اﳌﻀﺮور ﻓـﻲ اﻟﺘﻌﻮﻳﺾ‬،‫ﻗﺎﻧﻮن آﺧﺮ‬
First Article
injured party for remuneration, Offences shall be punished ‫ﻳﻌﺎﻗﺐ ﻋﻠﻰ اﳉﺮاﺋﻢ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﻮاد اﻟﺘﺎﻟﻴﺔ‬
by the sentences stipulated in the following articles. .‫ﺑﺎﻟﻌﻘﻮﺑﺎت اﳌﻘﺮرة ﻟﻬﺎ‬

٢٩
 Article 36 ٣٦ ‫اﳌﺎدة‬

A fine of no less than one hundred thousand pounds and ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز ﻣﻠﻴﻮن‬
not exceeding one million pounds shall be imposed on all
‫ﺟﻨﻴﻪ ﻛﻞ ﺣﺎﺋﺰ أو ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ ﺟﻤﻊ أو ﻋﺎﻟﺞ أو أﻓﺸﻰ‬
controllers or processors who are collecting, processing,
making available any personal data electronically by any ‫أو أﺗﺎح أو ﺗﺪاول ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﻣﻌﺎﳉﺔ إﻟﻜﺘﺮوﻧﻴﺎ ﺑﺄي‬
means in other cases not legally authorized or without the ‫وﺳـــﻴﻠﺔ ﻣﻦ اﻟﻮﺳﺎﺋﻞ ﻓـﻲ ﻏﻴﺮ اﻷﺣـــــﻮال اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬
consent of the data subject. .‫أو ﺑﺪون ﻣﻮاﻓﻘﺔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت‬
The penalty shall be imprisonment for a period of no less ‫وﺗﻜﻮن اﻟﻌﻘﻮﺑﺔ اﳊﺒﺲ ﻣﺪة ﻻ ﺗﻘﻞ ﻋﻦ ﺳﺘﺔ ﺷﻬﻮر وﺑﻐﺮاﻣﺔ‬
than six months and a fine of no less than two hundred
،‫ﻻ ﺗﻘﻞ ﻋﻦ ﻣـــﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡـــــﺎوز ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴــــﻪ‬
thousand pounds and not exceeding two million pounds,
or one of these two penalties if it is committed in exchange ‫ إذا ارﺗﻜـــﺐ ذﻟﻚ ﻣﻘﺎﺑﻞ‬،‫أو ﺑﺈﺣﺪى ﻫﺎﺗﲔ اﻟﻌﻘﻮﺑﺘـــــﲔ‬
for obtaining a material or moral benefit or with the intent ‫ أو ﺑﻘﺼﺪ ﺗﻌﺮﻳﺾ‬،‫اﳊﺼﻮل ﻋﻠﻰ ﻣﻨﻔﻌﺔ ﻣﺎدﻳﺔ أو أدﺑﻴﺔ‬
to expose the data subject to danger or harm. .‫اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻟﻠﺨﻄﺮ أو اﻟﻀﺮر‬

Article 37 ٣٧ ‫اﳌﺎدة‬

A fine of no less than two thousand pounds and not ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز ﻣﻠﻴﻮن‬
exceeding one million shall be imposed on any possessor,
‫ ﻛﻞ ﺣﺎﺋﺰ أو ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ اﻣﺘﻨﻊ دون ﻣﻘﺘﺾ ﻣﻦ‬،‫ﺟﻨﻴﻪ‬
controller or processor who refuses, without a legal
‫اﻟﻘﺎﻧﻮن ﻋﻦ ﲤﻜﲔ اﻟﺸﺨﺺ اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت ﻣﻦ ﳑﺎرﺳﺔ‬
permit, to enable data subject to exercise the rights
stipulated in Article 2 of this law. A fine of no less than ‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٢) ‫ﺣﻘﻮﻗﻪ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﺎدة‬
two hundred pounds and not exceeding two million ‫وﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
pounds shall be imposed on any person who collects ‫ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ ﻛﻞ ﻣﻦ ﺟﻤﻊ ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﺑﺪون ﺗﻮاﻓﺮ‬
personal data without fulfilling the conditions stipulated .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٣) ‫اﻟﺸﺮوط اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﺎدة‬
in Article 3.

Article 38 ٣٨ ‫اﳌﺎدة‬

Any controller or processor who fails to comply with the ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﺛﻼﺛﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
duties stipulated in Articles 4, 5 and 6 of this law shall be
‫ ﻛﻞ ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ ﻟﻢ ﻳﻠﺘﺰم ﺑﻮاﺟﺒﺎﺗﻪ‬،‫ﺛﻼﺛﺔ ﻣﻼﻳﲔ ﺟﻨﻴﻪ‬
punished with a fine of no less than three hundred
thousand pounds and not exceeding three million pounds. .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٧ ،٥ ،٤) ‫اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﻮاد‬

Article 39 ٣٩ ‫اﳌﺎدة‬

A fine of no less than two hundred thousand pounds and ‫ﻳﻌﺎﻗﺐ ﺑﺎﻟﻐﺮاﻣﺔ اﻟﺘﻲ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
no more than one million shall be imposed on legal
‫ ﻛﻞ ﳑﺜﻞ ﻗﺎﻧﻮﻧﻲ ﻟﻠﺸﺨﺺ اﻻﻋﺘﺒﺎري ﻟﻢ‬،‫ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ‬
representative who has not complied with one of the
‫( ﻣﻦ‬٨) ‫ﻳﻠﺘﺰم ﺑﺄﺣﺪ واﺟﺒﺎﺗﻪ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﺎدة‬
duties stipulated in Article 8 of this law.
.‫ﻫﺬا اﻟﻘﺎﻧﻮن‬

٣٠
 Article 40 ٤٠ ‫اﳌﺎدة‬
A fine of no less than two hundred thousand pounds and ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
no more two million pounds shall be imposed on any
‫ ﻛﻞ ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﻟﻢ ﻳﻠﺘﺰم‬،‫ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ‬
officer responsible for the protection of personal data,
who has not complied with the requirements of the ‫( ﻣﻦ ﻫﺬا‬٩) ‫ﲟﻘﺘﻀﻴﺎت وﻇﻴﻔﺘﻪ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﺎدة‬
position stipulated in Article 9. .‫اﻟﻘﺎﻧﻮن‬
A fine of no less than fifty thousand EGP and no more ‫وﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﺧﻤﺴﲔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
than five hundred thousand EGP shall be imposed in case ‫ﺧﻤﺴﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ إذا وﻗﻌﺖ اﳉﺮﳝﺔ ﻧﺘﻴﺠﺔ ﻹﻫﻤﺎل‬
the crime occurred as a result of the negligence of the .‫ﻣﺴﺌﻮل ﺣﻤﺎﻳﺔ اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ‬
official responsible for the protection of personal data.

Article 41 ٤١ ‫اﳌﺎدة‬
Imprisonment for a period of no less than three months and ‫ﻋﺎﻗﺐ ﺑﺎﳊﺒﺲ ﻣﺪة ﻻ ﺗﻘﻞ ﻋﻦ ﺛﻼﺛﺔ ﺷﻬﻮر وﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ‬
a fine of no less than five million pounds or one of the two ،‫ﻋﻦ ﺧﻤﺴﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز ﺧﻤﺴﺔ ﻣﻼﻳﲔ ﺟﻨﻴﻪ‬
penalties shall be imposed on every possessor who collects, ‫ ﻛﻞ ﺣﺎﺋﺰ أو ﻣﺘﺤﻜﻢ أو ﻣﻌﺎﻟﺞ‬،‫أو ﺑﺈﺣﺪى ﻫﺎﺗﲔ اﻟﻌﻘﻮﺑﺘﲔ‬
makes available, circulates, processes, discloses, stores, ‫ﺟﻤــــﻊ أو أﺗﺎح أو ﺗﺪاول أو ﻋﺎﻟــﺞ أو أﻓﺸﻰ أو ﺧﺰن أو ﻧﻘﻞ‬
transfers or stores sensitive personal data without the ‫أو ﺣﻔﻆ ﺑﻴﺎﻧﺎت ﺷﺨﺼﻴﺔ ﺣﺴﺎﺳﺔ ﺑﺪون ﻣﻮاﻓﻘﺔ اﻟﺸﺨﺺ‬
consent of data subject or in other than authorized cases .‫اﳌﻌﻨﻲ ﺑﺎﻟﺒﻴﺎﻧﺎت أو ﻓـﻲ ﻏﻴﺮ اﻷﺣﻮال اﳌﺼﺮح ﺑﻬﺎ ﻗﺎﻧﻮﻧﺎ‬

Article 42 ٤٢ ‫اﳌﺎدة‬
a term of imprisonment of no less than three months and ‫ﻳﻌﺎﻗﺐ ﺑﺎﳊﺒﺲ ﻣﺪة ﻻ ﺗﻘﻞ ﻋﻦ ﺛﻼﺛﺔ ﺷﻬﻮر وﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ‬
a fine of no less than five hundred million pounds or one ،‫ﻋﻦ ﺧﻤﺴﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز ﺧﻤﺴﺔ ﻣﻼﻳﲔ ﺟﻨﻴﻪ‬
of these two penalties shall be imposed on anyone who ‫ ﻛﻞ ﻣﻦ ﺧﺎﻟﻒ أﺣﻜﺎم ﺣﺮﻛﺔ‬،‫أو ﺑﺈﺣﺪى ﻫﺎﺗﲔ اﻟﻌﻘﻮﺑﺘﲔ‬
violates the provisions of the transmission of personal ‫اﻟﺒﻴﺎﻧﺎت اﻟﺸﺨﺼﻴﺔ ﻋﺒﺮ اﳊﺪود اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ‬
data across borders stipulated in Article 14, 15 and 16. .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬١٦ ،١٥ ،١٤) ‫اﳌﻮاد‬

Article 43 ٤٣ ‫اﳌﺎدة‬

A fine of no less than three hundred thousand pounds ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﻣﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
and no more than two million on whoever violates the ‫ ﻛﻞ ﻣﻦ ﺧﺎﻟﻒ أﺣﻜﺎم اﻟﺘﺴﻮﻳﻖ اﻹﻟﻜﺘﺮوﻧﻲ‬،‫ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ‬
digital marketing provisions stipulated in Article 17 and .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬١٨ ،١٧) ‫اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﺎدﺗﲔ‬
18 shall be punished

Article 44 ٤٤ ‫اﳌﺎدة‬
A fine of no less than three hundred thousand and no ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﺛﻼﺛﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
more than three million pounds shall apply to any ‫ ﻛﻞ ﻋﻀﻮ ﻣﺠﻠﺲ إدارة أو أي ﻣﻦ‬،‫ﺛﻼﺛﺔ ﻣﻼﻳﲔ ﺟﻨﻴﻪ‬
member of the Centre’s board of directors or any of the
‫اﻟﻌﺎﻣﻠﲔ ﺑﺎﳌﺮﻛﺰ ﺧﺎﻟﻒ اﻻﻟﺘﺰاﻣﺎت اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ‬
employees workingFirst Articleof the obligations
in violation
.‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٢٤) ‫اﳌﺎدة‬
stipulated in Article 24 of this law

٣١
 Article 45 ٤٥ ‫اﳌﺎدة‬

A fine of no less than five hundred thousand sides and ‫ﻳﻌﺎﻗﺐ ﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ ﻋﻦ ﺧﻤﺴﻤﺎﺋﺔ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز‬
not exceeding five million shall be imposed on anyone ‫ ﻛﻞ ﻣﻦ ﺧﺎﻟﻒ أﺣﻜﺎم اﻟﺘﺮاﺧﻴــــﺺ‬،‫ﺧﻤﺴـــﺔ ﻣﻼﻳﲔ ﺟﻨﻴــــﻪ‬
who violates the provisions of the licenses or licenses .‫أو اﻟﺘﺼﺎرﻳﺢ أو اﻻﻋﺘﻤﺎدات اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
stipulated.

Article 46 ٤٦ ‫اﳌﺎدة‬

a term of imprisonment with no less than six months and ‫ﻳﻌﺎﻗﺐ ﺑﺎﳊﺒﺲ ﻣﺪة ﻻ ﺗﻘﻞ ﻋﻦ ﺳﺘﺔ أﺷﻬﺮ وﺑﻐﺮاﻣﺔ ﻻ ﺗﻘﻞ‬
a penalty of no less than two hundred thousand pounds
‫ أو ﺑﺈﺣﺪى‬،‫ﻋﻦ ﻣﺎﺋﺘﻲ أﻟﻒ ﺟﻨﻴﻪ وﻻ ﲡﺎوز ﻣﻠﻴﻮﻧﻲ ﺟﻨﻴﻪ‬
or one of these two penalties shall apply on whoever
‫ ﻛﻞ ﻣﻦ ﻣﻨﻊ أﺣﺪ اﻟﻌﺎﻣﻠﲔ ﺑﺎﳌﺮﻛﺰ ﳑﻦ‬،‫ﻫﺎﺗﲔ اﻟﻌﻘﻮﺑﺘﲔ‬
prevents one of the employees of the Centre who have the
power of the judicial control to perform his work. .‫ﻳﺘﻤﺘﻌﻮن ﺑﺼﻔﺔ اﻟﻀﺒﻄﻴﺔ اﻟﻘﻀﺎﺋﻴﺔ ﻣﻦ أداء ﻋﻤﻠﻪ‬

Article 47 ٤٧ ‫اﳌﺎدة‬

The person in charge for the actual management of a ‫ﻳﻌﺎﻗﺐ اﳌﺴﺌﻮل ﻋﻦ اﻹدارة اﻟﻔﻌﻠﻴﺔ ﻟﻠﺸﺨﺺ اﻻﻋﺘﺒﺎري‬
juristic person in violation with the same penalties ‫اﳌﺨﺎﻟﻒ ﺑﺬات اﻟﻌﻘﻮﺑﺎت اﳌﻘﺮرة ﻋﻦ اﻷﻓﻌﺎل اﻟﺘﻲ ﺗﺮﺗﻜﺐ‬
prescribed for acts committed in violation of the ‫ وﻛﺎن‬،‫ إذا ﺛﺒﺖ ﻋﻠﻤﻪ ﺑﻬﺎ‬،‫ﺑﺎﳌﺨﺎﻟﻔﺔ ﻷﺣﻜﺎم ﻫﺬا اﻟﻘﺎﻧﻮن‬
provisions of this law shall be sentenced, if it is proved ‫إﺧﻼﻟﻪ ﺑﺎﻟﻮاﺟﺒﺎت اﻟﺘﻲ ﺗﻔﺮﺿﻬﺎ ﻋﻠﻴﻪ ﺗﻠﻚ اﻹدارة ﻗﺪ أﺳﻬﻢ‬
.‫ﻓـﻲ وﻗﻮع اﳉﺮﳝﺔ‬
that he has been aware of, and the violation of the duties
‫وﻳﻜﻮن اﻟﺸﺨﺺ اﻻﻋﺘﺒﺎري ﻣﺴﺌﻮﻻ ﺑﺎﻟﺘﻀﺎﻣﻦ ﻋﻦ اﻟﻮﻓﺎء ﲟﺎ‬
imposed by the management has contributed to the
‫ﻳﺤﻜﻢ ﺑﻪ ﻣﻦ ﺗﻌﻮﻳﻀﺎت إذا ﻛﺎﻧﺖ اﳌﺨﺎﻟﻔﺔ ﻗﺪ ارﺗﻜﺒﺖ ﻣﻦ‬
occurrence of the crime. .‫أﺣﺪ اﻟﻌﺎﻣﻠﲔ ﻟﺪﻳﻪ وﺑﺎﺳﻢ اﻟﺸﺨﺺ اﻻﻋﺘﺒﺎري وﻟﺼﺎﳊﻪ‬

Article 48 ٤٨ ‫اﳌﺎدة‬

In all cases, in addition to the penalties stipulated in this ‫ وﻓﻀﻼ ﻋﻦ اﻟﻌﻘﻮﺑﺎت اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ‬،‫ﻓـﻲ ﺟﻤﻴﻊ اﻷﺣﻮال‬
law, the court shall publish the conviction judgment in
‫ ﺗﻘﻀﻲ اﶈﻜﻤﺔ ﺑﻨﺸﺮ ﺣﻜﻢ اﻹداﻧﺔ ﻓـﻲ‬،‫ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن‬
two widely published newspapers and on electronic
‫ وﻋﻠﻰ ﺷﺒﻜﺎت اﳌﻌﻠﻮﻣﺎت‬،‫ﺟﺮﻳﺪﺗﲔ واﺳﻌﺘﻲ اﻻﻧﺘﺸﺎر‬
information networks open at the expense of the
convicted person. .‫اﻹﻟﻜﺘﺮوﻧﻴﺔ اﳌﻔﺘﻮﺣﺔ ﻋﻠﻰ ﻧﻔﻘﺔ اﶈﻜﻮم ﻋﻠﻴﻪ‬
In the case of repetition , the penalties in this chapter ‫ ﺗﻀﺎﻋﻒ اﻟﻌﻘﻮﺑﺎت اﻟﻮاردة ﻓـﻲ ﻫﺬا‬،‫وﻓـﻲ ﺣﺎﻟﺔ اﻟﻌﻮد‬
shall be doubled to the maximum and minimum. .‫اﻟﻔﺼﻞ ﺑﺤﺪﻳﻬﺎ اﻷﻗﺼﻰ واﻷدﻧﻰ‬
An attempt to commit the offenses set forth in this Law is ‫وﻳﻌﺎﻗﺐ ﻋﻠﻰ اﻟﺸﺮوع ﻓـﻲ ارﺗﻜﺎب اﳉﺮاﺋﻢ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ‬
punishable by half of the penalty. .‫ﻓـﻲ ﻫﺬا اﻟﻘﺎﻧﻮن ﺑﻨﺼﻒ اﻟﻌﻘﻮﺑﺔ اﳌﻘﺮرة ﻟﻬﺎ‬

٣٢
 Chapter - 14 ‫اﻟﻔﺼﻞ اﻟﺮاﺑﻊ ﻋﺸﺮ‬
Fourteen- Reconciliation ‫"اﳉﺮاﺋﻢ واﻟﻌﻘﻮﺑﺎت" اﻟﺼﻠﺢ واﻟﺘﺼﺎﻟﺢ‬

Article 49 ٤٩ ‫اﳌﺎدة‬

The accused may, in any case where the criminal lawsuit ،‫ﻳﺠﻮز ﻟﻠﻤﺘﻬﻢ ﻓـﻲ أي ﺣﺎﻟﺔ ﻛﺎﻧﺖ ﻋﻠﻴﻬﺎ اﻟﺪﻋﻮى اﳉﻨﺎﺋﻴﺔ‬
was rejected and before the ruling is final, substantiate the ‫ إﺛﺒﺎت اﻟﺼﻠﺢ ﻣﻊ اﳌﺠﻨﻲ ﻋﻠﻴــــﻪ‬،‫وﻗﺒﻞ ﺻﻴﺮورة اﳊﻜﻢ ﺑﺎﺗﺎ‬
reconciliation withFirstthe victim or his private
Article ‫ وﲟﻮاﻓﻘﺔ اﳌﺮﻛﺰ أﻣﺎم‬،‫أو وﻛﻴﻠﻪ اﳋﺎص أو ﺧﻠﻔﻪ اﻟﻌﺎم‬
representative or his successor, with the approval of the
‫ وذﻟﻚ‬،‫اﻟﻨﻴﺎﺑﺔ اﻟﻌﺎﻣﺔ أو اﶈﻜﻤﺔ اﳌﺨﺘﺼﺔ ﺑﺤﺴﺐ اﻷﺣﻮال‬
Centre before the Public Prosecution or the competent
،٣٩ ،٣٨ ،٣٧ ،٣٦) ‫ﻓـﻲ اﳉﻨﺢ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ ﻓـﻲ اﳌﻮاد‬
court, according to the circumstances, and that for the
misdemeanors stipulated in the articles 43, 41, 4, 39, 38, .‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن‬٤٣ ،٤١ ،٤٠
37 and 36. ‫وﻳﻜﻮن اﻟﺘﺼﺎﻟﺢ ﻣﻊ اﳌﺮﻛﺰ ﻓـﻲ اﳉﻨﺢ اﳌﻨﺼﻮص ﻋﻠﻴﻬﺎ‬
‫( ﻣﻦ ﻫﺬا اﻟﻘﺎﻧﻮن ﻓـﻲ أي ﺣﺎﻟﺔ ﻛﺎﻧﺖ‬٤٥ ،٤٤ ،٤٢) ‫ﺑﺎﳌﻮاد‬
Reconciliation with the Centre shall be in the
.‫ﻋﻠﻴﻬﺎ اﻟﺪﻋﻮى‬
misdemeanors stipulated in the articles 42, 44 and 45 in
‫ ﻳﺠﺐ ﻋﻠﻰ اﳌﺘﻬﻢ اﻟﺬي ﻳﺮﻏﺐ ﻓـﻲ‬،‫وﻓـﻲ ﺟﻤﻴﻊ اﻷﺣﻮال‬
whatever the current status of the lawsuit.
‫اﻟﺘﺼﺎﻟﺢ أن ﻳﺴﺪد ﻗﺒﻞ رﻓﻊ اﻟﺪﻋﻮى اﳉﻨﺎﺋﻴﺔ ﻣﺒﻠﻐﺎ ﻳﻌﺎدل‬
In all cases, the accused who wishes to reconcile must pay, .‫ﻧﺼﻒ اﳊﺪ اﻷدﻧﻰ ﻟﻠﻐﺮاﻣﺔ اﳌﻘﺮرة ﻟﻠﺠﺮﳝﺔ‬
before filing the criminal lawsuit, an amount equal to half ‫وﻳﺴﺪد اﳌﺘﻬﻢ راﻏﺐ اﻟﺘﺼﺎﻟﺢ ﺑﻌﺪ رﻓﻊ اﻟﺪﻋﻮى وﻗﺒﻞ‬
of the minimum fine established for the crime. ‫ﺻﻴﺮورة اﳊﻜﻢ ﺑﺎﺗﺎ ﻧﺼﻒ اﳊﺪ اﻷﻗﺼﻰ ﻟﻠﻐﺮاﻣﺔ اﳌﻘﺮرة‬
Payment shall be in the treasury of the competent court, .‫ أو ﻗﻴﻤﺔ اﻟﻐﺮاﻣﺔ اﳌﻘﻀﻲ ﺑﻬﺎ أﻳﻬﻤﺎ أﻛﺒﺮ‬،‫ﻟﻠﺠﺮﳝﺔ‬
the public prosecutor or the Centre according to the case. ‫وﻳﻜﻮن اﻟﺴﺪاد ﻓـﻲ ﺧﺰاﻧﺔ اﶈﻜﻤﺔ اﳌﺨﺘﺼﺔ أو اﻟﻨﻴﺎﺑﺔ‬
.‫اﻟﻌﺎﻣﺔ أو اﳌﺮﻛﺰ ﺑﺤﺴﺐ اﻷﺣﻮال‬
Reconciliation shall result in the termination of the ‫وﻳﺘﺮﺗﺐ ﻋﻠﻰ اﻟﺘﺼﺎﻟﺢ اﻧﻘﻀﺎء اﻟﺪﻋﻮى اﳉﻨﺎﺋﻴﺔ دون أن‬
criminal case without having any impact on the rights of .‫ﻳﻜﻮن ﻟﻪ أﺛﺮ ﻋﻠﻰ ﺣﻘﻮق اﳌﻀﺮور ﻣﻦ اﳉﺮﳝﺔ‬
the person affected by the crime.

٣٣
٣٤
2021

The British University in Egypt

EL Sherouk City, Suez Desert Road, Cairo11837 - P.O. Box 43

19283, +202 26890000, +202 26300013 / 14 / 15/ 16 /17 /18

[Link]

[Link]/[Link]

[Link]/buefacultyoflaw