It is reported that social media advertisements directed at Egyptian consumers are required to be presented in Arabic or accompanied by an Arabic translation.

According to Art. 6 of Law 180 of 2018, a license from the Supreme Council for Media Regulation (SCMR) is required to establish and manage a website in Egypt and operate offices or branches for websites. This license requires, inter alia, operating inside a specific media area. If a license is not obtained, the SCMR can cease or block the website. The term "website" is defined in Art. 1 as "the licensed page, link or application through which press, media or advertising content is provided, whether textual, audio, visual, static, animated or multimedia, issued under a specific name, with a specific electronic address and domain and created, hosted or accessed through the International Information Network (Internet)", therefore it also covers any online links and applications through which press, media, or advertising content is provided. According to Art. 60 of the law, websites are required to pay a fee of EGP 50,000 (approx. USD 2,800) to obtain the license and gain legal status. In addition, pursuant to Art. 40 of Law 180 of 2018, any person wishing to issue a newspaper or establish a website is required to notify the Supreme Council and provide a description of the type of content, editorial policy, sources of funding, and other detailed information. Furthermore, Art. 41 adds that it is not permitted to issue a newspaper or establish a website before completing the notification data.
It is reported that, in June 2024, Egyptian authorities escalated enforcement by announcing plans to block all unlicensed platforms within three months and ordering banks to halt financial transfers to platforms operating illegally without licenses, effectively creating a comply-or-exit ultimatum for foreign technology companies.

According to Art. 59 of Law No. 180 of 2018, no media outlet or electronic site may be established, operated, or advertised before obtaining a license from the Supreme Council, which will specify the licensing requirements. Furthermore, Art. 60 requires media outlets to pay a fee of EGP 250,000 (approx. USD 16,000) to obtain a license from the SCMR and gain legal status. It is reported that "the law defines 'media outlet' very broadly, to include any social media account with at least 5,000 subscribers." The report adds that this law and other laws have been used "as grounds to expand website blocking, (which) undermines the value of Internet-based services to their customers and imposes costs on local firms that depend on these services for their business."
In addition, pursuant to Art. 40, any person wishing to establish a media outlet is required to notify the Supreme Council and provide a description of the type of content, editorial policy, sources of funding, and other detailed information. According to Art. 10 of Cabinet Resolution No. 418 of 2020, the Supreme Council shall set the necessary forms for requests to establish or operate media outlets, provided that they include the name, surname, nationality, and place of residence of the owner, the outlet's name and logo, the language in which it broadcasts, type of activity, funding sources, editorial and administrative structure, statement of budget, name and address of its designated "Broadcasting Officer," and their programs' manager.
It is reported that, in June 2024, Egyptian authorities escalated enforcement by announcing plans to block all unlicensed platforms within three months and ordering banks to halt financial transfers to platforms operating illegally without licenses, effectively creating a comply-or-exit ultimatum for foreign technology companies.

Only Egyptian joint-stock companies incorporated in accordance with Egyptian law can apply for and obtain internet service provider (Class A) and Voice over Internet Protocol (VoIP) licenses in Egypt. This means that ISPs and VoIP services of foreign providers with no commercial presence in Egypt and minimum Egyptian stocks are not permissible in Egypt.

According to Art. 2.3 of Law No. 175, the national security authorities may request access/use to all technical capabilities from the service provider (namely mobile operators and technology service providers) and their affiliates. This is for the purpose of enabling the national security authorities to exercise their powers in accordance with Law No. 175. It is reported that this is a generic right; it does not explicitly allow the access and retention of personal data maintained by service providers. However, it is expected that the data stored might be accessible to the national security authorities while exercising this right. The main guarantee is that the use of such a right should not violate the inviolability of private life. This right is not further regulated; there are no specific guarantees that limit the national security authorities' use of their powers in this regard. There is no specific duration for the power granted.

A basic legal framework on intermediary liability for copyright infringement is absent in Egypt's law and jurisprudence. Whether intermediary liability is recognised in the Egyptian Intellectual Property Law, opinions are not conclusive. Some experts consider Art. 147 of Law on the Protection of Intellectual Property Rights covers intermediary liability due to its breadth, giving the author the right to prevent the exploitation of its work "in any form" and "in any manner, through computers, the Internet, information networks, communication networks, and other means”. An alternative view is that the law does not contain any provisions that explicitly impose liability upon Internet intermediaries for acts of infringement.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Egypt's law and jurisprudence. In addition, it is reported that "the introduction of the Anti-Cybercrime Law triggered a controversial public debate" in Egypt, in particular "the offences in Arts. 25, 27, 29, and 35 are very broadly defined, and cannot exclude a general liability for web administrators or managers of a legal entity for content-related violations". The application of the law will provide further clarity on this issue.

Art. 5 of the General Rules and Conditions for Protecting Mobile and Fixed Users’ Rights in A.R.E, published by the National Telecommunication Regulatory Authority (NTRA), stipulates that the identity and a national number of mobile and fixed-line services customers have to be registered "in all cases". It is also reported that, since 2010, NTRA has required distributors of SIM cards to collect personal data from buyers and copies of their identification documents before the cards can be activated.

Under Art. 7 of Egypt’s Law No. 175 of 2018, authorities may order the blocking of websites that broadcast content constituting a criminal offence or posing a threat to national security or the economy. Such orders must be submitted to a competent court within 24 hours and ruled upon within 72 hours. In urgent cases, a temporary block may be imposed but must be formalised within 48 hours or it becomes void. Courts may subsequently confirm, amend, or lift the block, which is nullified if the case is dismissed or results in acquittal. It has been reported that the National Telecommunication Regulatory Authority (NTRA) has instructed several telecom companies to block websites pursuant to Art. 7. As of June 2024, 562 websites have been blocked in Egypt, including approximately 132 news outlets.
A similar requirement is contained in Art. 4 of Egypt's Media Law No. 180 of 2018, which provides the right for the Supreme Council to block publications, newspapers, media or advertising issued or broadcast from abroad from entering Egypt "for considerations required by national security". Several international reports highlight that the government has abused this article by leveraging the vagueness of the concept of national security.

The Media Licensing Regulations, issued in February 2020 to implement the Media Law, require media advertising companies to acquire a license to offer their services, while non-Egyptian media advertising companies have to pay a license fee and approval from the Supreme Council for Media (SCoM), which requires, among other things, operating within a specific media area, the availability to block any content involving, among other things, violence, suicide, self-harm or nudity.
It is reported that foreign platforms which facilitate paid advertising in Egypt may be required to register or obtain licences to ensure compliance with financial reporting and taxation obligations.

Section 7-3 of Egypt’s IoT Framework explicitly requires that satellite operators licensed to provide IoT connectivity services must establish an Earth station within Egypt. This station must be used to transmit IoT service data across the country. Exceptions to this requirement are only permitted with prior approval from the National Telecom Regulatory Authority (NTRA).

Art. 14 of Law No. 151 of 2020 on Personal Data Protection prohibits the transfer of personal data to a foreign country unless the laws of the foreign country guarantee a minimum level of protection that is equal to the level stipulated by Egyptian law. Moreover, the transfer of data abroad requires an authorisation or a license from the Data Protection Centre. Art. 15 enumerates several specific exceptions to the obligation of Art. 14 subject to the express consent of the person concerned with the data or his representative.

Egypt has not joined any free trade agreement committing to open transfers of cross-border data flows.

Law on the Protection of Personal Data provides a comprehensive regime of data protection in Egypt. The law has similarities with the EU's General Data Protection Regulation (Regulation (EU) 2016/679) and includes data subject rights, data controller and processor obligations, and strict conditions for data transfers to foreign countries.

Art. 2.1 of the Anti-Cybercrime Law requires every telecommunications service to maintain records (i.e. logs) for 180 consecutive days. These logs should include, among others, information sufficient to identify the user and information related to the content of the operating system dealt with.