Egypt Personal Data Protection Law (Law No. 151 of 2020) Reg.14: Sensitive data controls: licence, explicit written consent, necessity, Centre security standards, no profiling of children and secure records

What does Reg.14 require?

For sensitive personal data the controller or processor holds the licence or permit matching its activity; obtains explicit written consent, on paper or electronically, from the data subject or the child's guardian except where the law permits otherwise; processes only data essential to the purpose of its work and without harm to the data subject; complies with the Centre's security standards for sensitive data; collects from a child in a game, competition or activity no more than participation needs and never uses it to classify, track or monitor the child's behaviour; applies any further standards the Centre's board adopts; and keeps secure electronic records of consents and of requests to delete, erase, modify or stop processing with proof of their execution.