WQ3
All articles

Signed Documents and Privacy: Egypt’s Personal Data Protection Law 151/2020

Explore how Egypt’s data protection law shapes privacy decisions before signing, during verification and when retaining documents.

1. A signed document is also a personal data record

An agreement can contain names, contact details and other information identifying the people involved. Signing also creates evidence about those people: who signed, which method they used and when actions occurred. Egypt’s Personal Data Protection Law No. 151 of 2020 regulates the processing of personal data by electronic means. For teams handling signed documents, privacy therefore concerns both the agreement and its associated proof records.

Privacy and signature validity answer different questions. Law No. 151 of 2020 concerns personal data protection, while Egypt’s Electronic Signature Law No. 15 of 2004 and its executive regulations recognise electronic signatures and documents when their conditions are met. WQ3 is aligned with both frameworks. In practice, teams should consider what information they need, who should receive it and how they will retain it alongside their signing requirements.

2. Review the information before choosing the signing workflow

Start with the document’s purpose. Check its main text and attachments, removing unrelated contact details, internal notes and information about people outside the transaction. WQ3’s privacy commitments include collecting only the data needed to provide the service and prove signatures. Teams can apply the same minimum-data approach to the files they prepare. Confirm recipients and the intended version before sending: WQ3 locks documents once sent and uses roles, permissions and individual invitations to control access.

Keep identity requirements separate from the signing method. WQ3 has exactly three signing levels: electronic signature, remote signing and token signing. An electronic signature suits everyday agreements; remote or token signing is intended for formal, high-value contracts and organisations requiring a certified digital certificate. eKYC is an account-verification add-on, not a fourth level, and can be required with any level when the signer’s identity must be proven.

3. Plan for the visibility of verification records

WQ3 provides a public check page accessible without an account through the QR code and reference associated with a signed contract. The QR code appears on the final file and completion certificate. Verification compares the file’s SHA-256 fingerprint with the stored fingerprint and displays signer names, signature levels and recorded timestamps. This information supports review, but it also deserves attention in privacy planning.

Before distributing a completed agreement or certificate, explain to signers that verification includes identity and timing information. A private signing link does not mean that all verification information is private. Document access and public verification are different matters. When checking a received copy, retain the exact file reviewed with its completion certificate, and investigate any fingerprint mismatch rather than relying on visual similarity.

4. Manage retention and privacy requests together

Completed documents, audit trails and completion certificates should all be considered when planning access and retention. WQ3 keeps documents and audit records for as long as needed to prove signatures and meet legal obligations, as agreed in the subscription; its Privacy Policy provides the details. For internal sharing, identify the review’s purpose and the information needed instead of automatically circulating every related record.

WQ3 provides a contact route for requests to access, correct or ask to delete personal data: legal@fedis.com.eg. A deletion request should be considered alongside applicable retention obligations, rather than assuming every signed record can be removed immediately. When raising a privacy enquiry, identify the relevant transaction and explain whether it concerns the agreement or its signing record, without attaching unnecessary personal documents.

This article is general information, not legal advice.

Read more on the related WQ3 page