The Egypt Financial Regulatory Authority has issued a board decision setting licensing controls for establishing websites by natural and legal persons operating in the insurance sector, including a requirement for private insurance funds with assets of EGP 10 million or more and all legal entities covered by the Unified Insurance Law to maintain an official website licensed by the Authority. The same framework also allows smaller private insurance funds and natural persons working in the sector to establish websites on the same terms. The decision sets mandatory technical and content standards, including responsive design, cross-browser compatibility, accessibility in line with WCAG, Arabic as the primary language with optional additional languages, and effective support channels. Websites must publish core information such as an entity profile, the FRA licence number, services and eligibility requirements, contact details, complaint and enquiry mechanisms, financial reports and periodic disclosures, and an FAQ section, with content kept up to date. It also imposes information security and privacy requirements, including SSL/TLS encryption, firewalls and web application firewalls, IDS/IPS, malware protection tools (EPP/EDR), alignment with international standards including ISO 27001 and NIST, annual penetration testing, regular patching, backups, and retention of system application logs for at least five years, alongside immediate notification to the Authority of violations, cyberattacks or security breaches and restrictions on sharing user data without written consent. Website design and build may be outsourced to data hosting companies registered with the Authority, subject to internal capability to oversee the work and a board-approved outsourcing plan, with prompt notification to the Authority upon signing or materially amending the outsourcing agreement. Affected entities are given up to three months from the decision’s effective date to regularise their status, and the Authority will decide on complete licensing applications within 15 days.
Egypt Financial Regulatory Authority 2025-06-18
Egypt Financial Regulatory Authority requires licensed official websites for insurers and private insurance funds with assets of EGP 10m or more
The Egypt Financial Regulatory Authority mandates licensing for insurance sector websites, requiring private insurance funds with assets of EGP 10 million or more and all legal entities under the Unified Insurance Law to maintain an Authority-licensed website. The framework includes technical and content standards, information security measures, and allows outsourcing to registered data hosting companies. Entities have three months to comply, with the Authority reviewing applications within 15 days.