Personal data now moves through almost every part of a business, from payroll and customer files to marketing lists and cloud services abroad. Each of those flows raises a question: on what basis is the data collected, who can see it, where is it stored, and what happens if it leaks? We help companies answer those questions in a way that fits how they actually operate. Our work typically begins with mapping the data a business holds, followed by practical policies, notices and internal procedures. We review contracts with service providers and group companies, advise on transfers outside Egypt, and prepare clients for dealings with the regulator. When an incident happens, we help contain the legal exposure and decide quickly who must be told, and when.