Privacy programs that hold when the regulator calls.
Outsourced Data Protection Officer services for Egyptian and regional businesses — built around Law No. 151 of 2020, its 2025 Executive Regulations, and the frameworks your international partners expect.
PDPC-ready, not generic
Programs mapped to Law 151/2020 and its Executive Regulations — not just ticking Checklist.
One counsel, not a call centre
Direct access to a CIPP/E- and CIPM-certified Data Protection Officer with over a decade in legal and regulatory compliance.
Bilingual by default
Policies, notices, and regulator correspondence drafted natively in Arabic and English — not machine-translated after the fact.
What an outsourced DPO actually does here.
Six workstreams, engaged together as an ongoing appointment or individually as scoped projects.
DPO Appointment
Named Data Protection Officer of record, liaising directly with the Personal Data Protection Center.
Gap Assessments & Policies
Data-flow mapping against PDPL and GDPR, with policies and notices drafted to close what's missing.
DPIA & ROPA
Impact assessments and records of processing that survive an actual audit, not just a checklist review.
Training & Awareness
Role-specific sessions for staff who handle personal data day to day, in Arabic or English.
Breach Response
A tested playbook for the 72-hour PDPC window and the three working days owed to affected individuals.
Cross-Border & Vendor Review
Transfer assessments and DPA reviews before data — or a vendor relationship — crosses a border.
Assess. Close the gaps. Operate. Stay ready.
Assess
Map data flows, systems, and existing controls against the PDPL and, where relevant, the GDPR.
Close the gaps
Draft or repair the policies, notices, contracts, and records of processing the assessment surfaces.
Operate
Serve as your named DPO, handling data-subject requests and liaising with the Personal Data Protection Center.
Stay ready
Ongoing training, monitoring, and breach-response support as enforcement of the PDPL matures.
Counsel, not just consulting.
Twelve years in legal and regulatory compliance, on both sides of the compliance conversation.
Ready to see where you stand?
A short assessment tells you exactly which of the six workstreams above you need — and which you don't.