About The RoleWe are looking for a Corporate Lawyer / Data Protection Officer (DPO) to support Tagaddod’s legal and regulatory compliance while taking ownership of the company’s personal data protection requirements.
The role will work closely with the Personal Data Protection Center (PDPC) and will be responsible for ensuring that the company’s collection, processing, storage, sharing, and transfer of personal data comply with Egyptian Personal Data Protection Law No. 151 of 2020, its Executive Regulations, and applicable PDPC requirements.
In addition, the role will provide day-to-day corporate legal support, including contract drafting and review, corporate governance, regulatory monitoring, and legal advice to internal stakeholders.
Key Responsibilities* Data Protection & PDPC Compliance
* Act as the primary point of contact between Tagaddod and the Personal Data Protection Center (PDPC).
* Manage the company’s registration, licensing, permits, and other regulatory requirements applicable to data controllers and processors.
* Ensure the company maintains the required registrations, licenses, records, and documentation under the applicable data protection framework.
* Monitor the company’s personal data processing activities and ensure compliance with Law No. 151 of 2020, its Executive Regulations, and PDPC directives.
* Conduct regular internal compliance reviews and identify areas requiring corrective action.
* Data Privacy & Governance
* Maintain an overview of the personal data collected, processed, stored, and shared across the company.
* Maintain and update Records of Processing Activities (ROPA) and other statutory records required for regulatory inspection.
* Conduct or coordinate Privacy Impact Assessments (PIAs) for high-risk personal data processing activities.
* Develop and maintain internal data protection policies, procedures, and guidelines.
* Work with HR, IT, Marketing, Sales, Product, and other departments to ensure privacy requirements are incorporated into business processes.
* Data Subject Rights
* Manage and coordinate data subject requests in accordance with Egyptian law, including requests relating to:
+ Access
+ Rectification
+ Erasure/forgetting
+ Objection
- Ensure requests are properly documented, reviewed, and handled within the applicable statutory deadlines.
- Data Breach Management
- Lead the company’s personal data breach response process in coordination with IT, Information Security, and relevant stakeholders.
- Assess and document personal data breaches and coordinate the required response.
- Ensure applicable breaches are reported to the PDPC within the required statutory timelines, including the 72-hour notification requirement where applicable.
- Coordinate notifications to affected individuals within the prescribed timelines.
- Maintain records of incidents, actions taken, and corrective measures.
- Cross-Border Data Transfers
- Review and assess cross-border transfers of personal data.
- Ensure international data transfers comply with applicable Egyptian statutory requirements and PDPC licensing requirements.
- Review relevant contracts and agreements involving international data transfers.
- Coordinate with internal stakeholders and external parties to ensure compliant data-transfer arrangements.
- Privacy Awareness & Training
- Deliver privacy and data protection training to employees across different departments.
- Develop awareness materials and guidelines to help employees understand their responsibilities when handling personal data.
- Promote a culture of data privacy and responsible data handling across the organization.
Corporate Legal Responsibilities* Contract Drafting & Review
* Draft, review, and negotiate commercial and corporate agreements, including:
+ Vendor Agreements
+ Service Level Agreements (SLAs)
+ Non-Disclosure Agreements (NDAs)
+ Master Service Agreements (MSAs)
- Ensure contracts adequately protect the company’s legal and commercial interests.
- Review contractual risks and provide practical recommendations to relevant stakeholders.
- Data Processing Agreements
- Draft, review, and negotiate Data Processing Agreements (DPAs).
- Ensure appropriate data protection and processing clauses are incorporated into commercial agreements.
- Review third-party contracts to ensure appropriate personal data protection obligations are addressed.
- Corporate Governance & Compliance
- Support corporate secretarial activities and governance requirements.
- Assist with preparing and maintaining General Assembly and Board meeting minutes.
- Support Commercial Registry updates and required corporate filings.
- Assist with filings and regulatory requirements before the General Authority for Investment and Free Zones (GAFI).
- Maintain accurate corporate legal records and documentation.
- Internal Legal Advisory
- Provide clear and practical legal advice to internal stakeholders across all departments.
- Identify legal and regulatory risks and recommend practical solutions that support business objectives.
- Review business initiatives and processes from a legal and compliance perspective.
- Regulatory Monitoring
- Monitor developments and changes in Egyptian legislation and regulations relevant to the company.
- Track updates related to data protection and privacy, corporate law, labor law, consumer protection, technology and digital regulations
- Communicate relevant regulatory changes to stakeholders and support the implementation of required updates.
Requirements
- * Bachelor’s degree in Law from a recognized university.
- 1–3 years of relevant legal experience, preferably in corporate law, data protection, privacy, compliance, or a related field.
- Strong interest and/or practical exposure to data protection and privacy regulations.
- Good understanding of Egyptian Personal Data Protection Law No. 151 of 2020 and its regulatory framework is highly preferred.
- Familiarity with the PDPC and data protection compliance requirements is a strong advantage.
- Experience drafting and reviewing commercial contracts.
- Good understanding of corporate governance and regulatory filings.
- Strong legal research and analytical skills.
- Excellent attention to detail and documentation skills.
- Strong written and verbal communication skills.
- Ability to work with multiple departments and translate legal requirements into practical business actions.
- Strong organizational skills and ability to manage confidential information.
- Fluency in Arabic and English.
