Egypt Personal Data Protection Law (Law No. 151 of 2020) Art.7: Art.7 Breach notification: the Centre within 72 hours and the data subject within three working days

A controller or processor notifies the Centre of any personal data infringement within 72 hours, or immediately where national security is concerned, so that the Centre can give the national security authorities within 72 hours a description of the nature, form and causes of the infringement and the approximate number of data and records affected, the DPO's details, the potential consequences, the measures taken and proposed to reduce the impact, evidence documenting the infringement and the corrective actions, and any further information the Centre requests; and in all cases notifies the data subject of the infringement and the measures taken within three working days of notifying the Centre.