Data Protection and Privacy 2025

EGYPT Law and Practice Contributed by: Ibrahim Shehata, Tasneem El-Naggar and Safa Rabea, Shehata & Partners

rights are protected and legal obligations are upheld. This integrated approach fosters trust in data-driven industries and ensures that pri - vacy and innovation can coexist harmoniously in Egypt’s evolving digital ecosystem. 3.3 Rights and Obligations Under Applicable Data Regulation IoT Regulatory Obligations Egypt’s laws governing IoT and data process - ing services aim to secure data handling while protecting user rights. IoT service providers and data processors must comply with licensing, data security, transparency and privacy require - ments, as outlined by the NTRA IoT regulatory framework, the PDPL and related regulations. IoT licensing in Egypt The NTRA IoT regulatory framework outlines the licences required for IoT service providers to establish, operate and provide services, as follows. Annex to Mobile Service Provider’s Licence This grants mobile operators the right to: • establish IoT networks using Narrow Band IoT (NB-IoT) and LTE-m technologies; • operate and provide IoT services via Non- Cellular LPWAN and mobile networks; and • offer IoT connectivity services when needed. Licence for Non-Cellular LPWAN This is issued to non-mobile telecom operators, allowing them to: • establish and operate Non-Cellular LPWAN; and • provide IoT connectivity services and offer IoT services to others in Egypt using their LPWAN infrastructure.

Licence for Satellite IoT Services This permits satellite operators to provide IoT connectivity services indirectly via licensed IoT providers. Satellite operators may not serve end users directly in Egypt but can offer IoT services

through licensed networks. IoT Service Provision Licence

This is valid for five years, renewable for an addi - tional five years, and obliges service providers to: • build IoT platforms and establish necessary systems for service delivery; • use licensed telecom networks for IoT con - nectivity; • obtain NTRA consent before providing ser - vices to government authorities; and • ensure compliance with international stand - ards and protect user data. Licence prerequisites The IoT regulatory framework further specifies the prerequisites and requirements for submit - ting a licence application. Corporations seeking any of the aforementioned licences must: • be an Egyptian corporation established pur - suant to the Egyptian Law, for which telecom - munications is the core business, expect for the cases indicated by the NTRA for satellite operators; • demonstrate reasonable telecom experience, especially in IoT services, whether through the applying corporation itself, its sharehold - ers or affiliated companies; and • provide proof of fiscal ability to undertake the licensed activities and meet all relevant finan - cial obligations.

113 CHAMBERS.COM

Powered by