{"id":629208,"date":"2018-05-24T04:10:08","date_gmt":"2018-05-24T04:10:08","guid":{"rendered":"https:\/\/enterpriseam.com\/egypt\/2018\/05\/24\/how-the-european-unions-new-data-protection-regulation-affects-your-business-here-in-egypt\/"},"modified":"2018-05-24T04:10:08","modified_gmt":"2018-05-24T04:10:08","slug":"how-the-european-unions-new-data-protection-regulation-affects-your-business-here-in-egypt","status":"publish","type":"post","link":"https:\/\/enterpriseam.com\/egypt\/2018\/05\/24\/how-the-european-unions-new-data-protection-regulation-affects-your-business-here-in-egypt\/","title":{"rendered":"How the European Union\u2019s new data protection regulation affects your business here in Egypt"},"content":{"rendered":"

<\/a> A new regulation that goes into effect in the European Union tomorrow could have an impact on every Egyptian business with a website. <\/strong>We asked our friends at Sharkawy & Sarhan Law Firm<\/a> for a primer on what it means to all of us and how to be prepared for it:<\/p>\n

Here\u2019s how the European General Data Protection Regulation (GDPR) affects companies in Egypt, starting from tomorrow when it goes into effect. It set out the rules for collecting personal information from individuals. The GDPR applies to all companies outside the EU, as long as they collect personal data in the context of offering goods or services to people located in the EU<\/strong>, or if the collected data is about the behavior of individuals located in the EU. We note that the GDPR refers to persons \u201cin\u201d the EU, regardless their nationality or the place where they usually live.<\/p>\n

This means that any personal information you may have collected for future marketing purposes may be subject to the GDPR<\/strong> if the marketing happens when that person was located in the EU. Likewise, if your company has a website with cookies<\/strong> (files that allow you to collect personal information relating to the users of your website), then you must watch out as you never know where the user may be based.<\/p>\n

In brief, what the GDPR regulates is mainly the collection, storage, transfer and usage of any information relating to natural persons. This includes the name, location data, online identifier or cultural traits of that natural person, as long as such information may lead to identifying the concerned person.<\/p>\n

Fines are massive and can find their way to Egypt.<\/strong> In certain cases, fines can reach up to EUR 20 million or 4% of the company\u2019s total worldwide annual turnover of the preceding financial year, whichever is higher. Administrative fines are imposed by the competent European supervisory authority. Claims for compensation may be also lodged before EU courts. The GDPR additionally requires all EU States to enforce their international cooperation mechanism to ensure cross-border enforcement where necessary \u2014 these mechanisms are already in place between Egypt and a number of EU countries.<\/p>\n

But you\u2019re not in the crosshairs \u2014 not yet, at least. <\/strong>The EU might not apply the extra-territorial effect of the GDPR aggressively on small and medium sized non-EU companies, at least at the early stages. Instead, we expect it to start by targeting large global companies, such as Facebook and Google. It might also focus on substantial leakages of personal data that result in actual damages. So if this is the first time you hear about the GDPR, don\u2019t panic \u2014 but don\u2019t ignore it, either.<\/strong> You still need to comply.<\/p>\n

What you can do now?<\/strong> If your company collects personal information about people outside Egypt, make sure that the concerned persons know who you are, the type of information that you are collecting, and why. For instance:<\/p>\n