Egypt: The New Egyptian Anti-Cybercrime Law Regulates Legal Responsibility For Web Pages And Their Content

Last Updated: 1 July 2019
Article by Kilian Bälz and Hussam Mujally
Most Popular Article in Egypt, July 2019

In mid-August 2018, Egypt enacted a new anti-cybercrime law that comprehensively regulates Internet activities for the first time. This client alert summarizes the key aspects of the new law, which may be relevant for international companies and organizations that operate web pages with a connection to Egypt, be it a web page hosted in or managed from Egypt, or one merely targeting Egyptian readers.

Introduction to the Anti-Cybercrime Law On 15th August 2018, Law No. 175/2018 on Combating Information Technology Crimes ("Anti-Cybercrime Law") came into force. The Anti-Cybercrime Law regulates activities online, and, according to official statements, it aims to complement the new press and media laws, which penalize, inter alia, unlicensed online activity and content violations, such as fake news. According to Article 44 of the new law, the Prime Minister will issue Executive Regulations within three months of the 15th August 2018 enactment date. Under Article 43, telecommunication service providers and other addressees of the law have a one-year transitional period during which they must bring their activities in line with the AntiCybercrime Law.

Overview of Addressees, Offenses, and Penalties

The Anti-Cybercrime Law comprises 45 articles that address a variety of offences, which are broadly related to the Internet, and their respective penalties. It covers offences against confidentiality, the integrity and availability of computer data, computer-related offences, offences related to infringements of privacy, and content-related offences, such as immoral content, as well as such threating national security1.

Addressees of the Anti-Cybercrime Law are: (i) users (natural and legal persons); (ii) managers of legal persons; (iii) service providers; (iv) web administrators; and (v) state officials. The law defines the term "web administrator" broadly to comprise both persons responsible for the technical aspects of a website, such as system administrators, and persons responsible for the content of the website (Article 1[14]).

The offences included in the Anti-Cybercrime Law are listed in eight chapters under Part Three. The most relevant chapters are:

- Chapter I: Offences Against the Integrity of Information Networks, Systems, and Technologies, which include such offences as online piracy, illegal access, data interference, computer sabotage, email account hacking, websites hacking, and offences against state-owned information systems.

- Chapter II: Crimes Committed by Means of Information Systems and Technologies, which include the theft of information, including credit cards and further electronic payments system, credit card fraud, and impersonation with fake email accounts, websites, and social media accounts.

- Chapter III: Crimes Related to Invasion of Privacy and Illegal Content, which include selling personal data, publishing personal and private data without consent, and violating the familial values and principles of Egyptian society.

- Chapter IV: Crimes Committed by Web Administrators

- Chapter V: Criminal Liability of Service Providers

- Chapter VII: Criminal Liability of Legal Persons

The penalties include imprisonment of up to two years and fines of up to 10 million Egyptian pounds.

The Law's Key Trends

The Anti-Cybercrime Law deals with a broad variety of issues, stretching from combatting online crime to censoring web pages with sensitive content. For international companies and institutions active in Egypt, the most relevant sections will be those regulating web pages and their content.

For example, Article 7 grants the investigating authority the power to block Egyptian-based or foreign websites featuring content that threatens national security or the national economy, as well as any content criminalized under the Anti-Cybercrime Law. A judge must validate an order to block a website within four days. The public prosecutor is further entitled to impose a travel ban on individuals suspected of committing a crime under the AntiCybercrime Law (Article 9). The authorities may also access, seize, attach, or trace information, data, or information systems for a period of not more than 60 days and in any medium in order to establish facts related to the commitment of a crime punishable under the law. Service providers are obligated to turn over any information related to users' activities as required by the authorities (Article 6).

Moreover, Article 3 allows Egyptian authorities to claim criminal jurisdiction over nonEgyptian citizens for crimes punishable under the Anti-Cybercrime Law when committed outside Egypt, provided such actions are also punishable in the country in which they were perpetrated. As a result, action can be taken against web pages, and the people who operate them, even if they are hosted or located outside Egypt.

Liability of Web Administrators and Managers

Pursuant to Article 27, a web administrator who creates, manages, or uses a website or a private account with the aim of committing or facilitating a crime can face imprisonment of not less than two years and/or a fine of between 100,000 and 300,000 Egyptian pounds.

Furthermore, web administrators are criminally liable for the safety of the information systems, websites, and accounts under their management. Under Article 29, if a web administrator exposes a website, an email account, a private account, or an information system to a crime punishable under the Anti-Cybercrime Law, the penalty is imprisonment for a period of no less than one year and/or a fine of between 20,000 and 200,000 Egyptian pounds. Where the crime occurred due to the web administrator's negligence, the penalty is reduced to imprisonment of not less than six months and/or a fine of between 20,000 and 200,000 Egyptian pounds. Negligence is assumed when the safety measures and precautions stipulated in the Executive Regulations are not satisfied.

If an entity's website or email accounts become the victim of a crime punishable under the Anti-Cybercrime Law, the entity's manager is obligated to report the matter to the competent authorities. Article 35 provides for imprisonment of not less than three months and/or a fine of between 30,000 and 100,000 Egyptian pounds for managers who fail to report such incidents. Furthermore, pursuant to Article 36, a manager of a legal person who is aware of a crime committed in the name or through the account of the legal person or facilitates the same shall be punished with the penalty designated for the perpetrator.

Liability for Website Content

Illegal content is not clearly defined in the Anti-Cybercrime Law. However, Article 25 provides that content violating the familial values and principles of Egyptian society or invading privacy is illegal.

The introduction of the Anti-Cybercrime Law triggered a controversial public debate. It is questionable whether persons responsible for a website's content, admins of social media accounts, or managers of a legal entity are criminally liable for any user-generated content presented online on their respective websites or accounts (e.g., through a comment or chat function). According to observers, the Anti-Cybercrime Law could be used to prosecute persons for content produced online, for instance via social media.

In our view, given that Article 27 provides for criminal sanctions, the aforementioned interpretation is too broad, and we find a narrow interpretation more convincing. According to the latter interpretation, the web administrator can only be held responsible for illegal content that was approved or solicited. Unless the aim of the website is to solicit or promote entries with illegal content, the broader interpretation would mean using Article 27 to prosecute a web administrator for a user's entry, which is not related to the webpage and beyond the administrator's control. In our view, therefore, a web administrator should not be held responsible for any illegal content that was published through a comment function and without a connection to the website's content. However, the offences in Articles 25, 27, 29, and 35 are indeed very broadly defined, and we cannot exclude a general liability for web administrators or managers of a legal entity for content-related violations.

It remains to be seen how the law will be implemented in practice. In any event, we recommend undertaking a due diligence analysis of security standards for websites, emails, and information systems of entities operating in Egypt as well as raising awareness amongst employees regarding cybersecurity and cybercrimes punishable under the Anti-Cybercrime Law.

1 Article 1 (25) defines national security as follows:

All that is related to the independence, stability, security of the country and the unity and safety of its territory. As well as all related to the affairs of Presidency, National Defense Council, National Security Council, Ministry of Defense and Military Production, Ministry of Interior, General Intelligence Directorate, Administrative Control Authority, and of all organs thereunder.

19 September 2018

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Authors
 
Some comments from our readers…
“The articles are extremely timely and highly applicable”
“I often find critical information not available elsewhere”
“As in-house counsel, Mondaq’s service is of great value”

Related Topics
 
Related Articles
 
Up-coming Events Search
Tools
Print
Font Size:
Translation
Channels
Mondaq on Twitter
 
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.

Disclaimer

The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.

General

Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions