13 - commitment to the wizard to the new personal data protection law

Accidents

The Communications and Information Technology Committee of the House of Representatives, chaired by MP Ahmad Badawi, decided to meet the data-processing obligations of the new personal data protection bill, which is being discussed by the committee.

The law, treated as any natural or juridical person by nature, defines the personal data in favor of the controller and in agreement with him and in accordance with his instructions.

Article 5 obliges the government's bill to protect personal data, which was approved by the Communications and Information Technology Committee of the House of Representatives, 13 obligations to the processor specified in the following :

The processing and implementation thereof in accordance with the rules governing this law and its executive regulations and in accordance with legitimate and legal cases and on the written instructions received from the Center or the Controller or from any status as the case may be, in particular with respect to the scope, subject matter and nature of the treatment process and the type of personal data and its agreement and adequacy With its intended purpose.

2. The purposes and practice of the treatment shall be lawful and shall not violate public order or morals.

3. The specific purpose and duration of the treatment shall not be exceeded, and the controller or person concerned with the data or each character, as the case may be, shall be notified of the time required for processing.

4 – not to involve another processor without the prior written permission of the controller.

5 – erase personal data by the end of the processing period or delivery of the controller.

6 – to do work or refrain from work that would make available personal data or the results of treatment only in the cases by law.

7. No processing of personal data that conflicts with a controlled object or activity unless the personal data are for statistical, educational or non-profit purposes without prejudice to the inviolability of private life. In all cases, such data must be anonymous.

8. Protect and secure the process of processing, media and electronic devices used in this and the personal data.

9 – Do not harm the person concerned with the data directly or indirectly.

10. Prepare a record of its processing processes, including the categories of treatment it performs on behalf of any controller, its contact data, its data protection officer, the processing time, limitations, scope, and mechanisms for erasing or modifying its personal data; a description of the technical and regulatory procedures for data security and processing .

11- Provide the means to prove his commitment to the application of the provisions of this law at the request of the controller and enable the Center of inspection and control to ensure compliance.

12- Obtain a license or permit from the Center to deal with personal data.

13. The processor shall comply with the provisions of the Law of Issuance by appointing a representative in the Arab Republic of Egypt to be dealt with by the Center or the person concerned in order to ensure compliance with this law.

In the event of more than one processor, each of them, in addition to the obligations stipulated in the contracts concluded between them, shall comply with all the obligations stipulated in this Law.

According to the draft law, the executive regulations shall specify the policies, procedures, controls, conditions, instructions and standards of such obligations.

Related topics

(tagsToTranslate) Personal data protection (t) Contacts Deputies (t) Ahmad Badawi (t) Personal data