On 21 October 2026, Egypt's Foreign Ministry began testing "Masri Bel Kharig" (Egyptian Abroad), an app that lets citizens abroad start consular transactions and follow each stage until completion, according to Amwal Al Ghad. The pilot covers 17 missions, among them Prague, Houston, Rabat, Hamburg, Berlin, Doha, Pretoria and Los Angeles. It is one piece of a wider move to put citizen-state contact onto government-run mobile channels. The right test for such apps is not whether they exist but whether they are voluntary, minimal in the data they take, and accountable when something goes wrong.
The strongest case for the app
The case for digitising consular work is strong, and we should state it fairly. A citizen in Pretoria or Houston who needs a passport renewal or a document attested faces long distances, limited office hours and opaque queues. A tracked, step-by-step digital workflow reduces that friction and creates an audit trail that makes delays visible. Egyptian Streets reported in August that Foreign Minister Badr Abdelatty cited passport processing in under two weeks and computerised birth certificates in three to five days, and that document-authentication offices had grown from 15 to about 40. An app that exposes those service levels to users can make those targets enforceable in practice. The ministry also says an AI assistant and more services are coming, and that the app is meant to connect to other state digital platforms, per Egyptian Streets' launch report.
This is proportionate modernisation, and a pro-innovation publication should say so plainly. Governments that make services easier to reach online deserve credit.
Where the risk sits
The risk lies in the design choices that surround the app, not in the app itself. Three questions matter.
First, is the app an option or the only door? The launch material describes the app as a new channel for consular transactions. Nothing we could verify says the existing consular counters are closing. Service-by-app is a convenience while the counter remains available. It becomes a mandate when it is the only way to get a document, and then citizens without a recent smartphone, or without comfort handing documents to an app, lose access. The same logic applies to the other government apps reported alongside this one, such as the Interior Ministry's MOIEG-PASS verification app and the Rafeeq Umrah app, which reportedly requires pilgrims to upload booking documents. We could not independently verify the design of either, so we make no claim about their data practices. The principle is general: the more an app is the sole route to a service, the higher the bar for what it may collect.
Second, what happens to the data? Consular transactions involve passports, civil-status records and criminal-record certificates, which are among the most sensitive documents a person holds. Egypt has a statute for this. Law No. 151 of 2020 created the Personal Data Protection Centre (PDPC), and its Executive Regulations were issued on 1 November 2025 under Ministerial Decision No. 816 of 2025, according to CMS. CMS says the regulations start a one-year compliance grace period. Clyde & Co lists full enforcement as 31 October 2026, while CMS notes uncertainty over whether the PDPC may treat the period as running to the end of the year. Either way, the window has now closed or is closing, just as the consular app begins accepting real documents.
That regime is demanding. Both law-firm summaries describe licences or permits from the PDPC for controllers and processors, separate authorisation for cross-border transfers, and breach notification to the PDPC within 72 hours. Those obligations bite hardest when a state agency runs a platform that collects documents from citizens in a dozen countries and stores them centrally. We found no source addressing whether, or how, government bodies are exempt from these requirements, and we did not read the statute's exclusions. That gap is itself the story: a ministry that publishes no privacy notice, retention period or breach protocol for its app is asking citizens for trust it has not yet earned.
Third, can the data be repurposed? The ministry says the app is meant to connect with other state digital platforms. Interoperability is efficient, and it is also how a consular record becomes a security record. The data-protection principle of purpose limitation, collecting data for a stated purpose and using it only for that, is the safeguard here. It should be written into the app's terms, not left to goodwill.
The wider context
A digital state that is trustworthy has to be accountable to the press and the public, and Egypt's recent record complicates the picture. EFF reported on 2 November that Mada Masr editor Lina Attalah was fined 3 million Egyptian pounds on 27 October for running an unlicensed news website, with the court ordering the outlet closed, and that she faces a second trial on false-news charges on 11 November. The cases are unrelated to the app, and we do not suggest the consular platform is a surveillance tool. But citizens weighing whether to hand over documents to a state platform reasonably consider how the same state treats independent scrutiny. Without a free press able to examine privacy practices, a privacy law is only as strong as the ministry's own willingness to follow it.
What proportionate looks like
- Keep the counter open. Offer the app as an option until usage and accessibility data show that no group is being excluded.
- Publish a privacy notice before the next phase. State what is collected, where it is stored, how long it is kept, and who can access it, in Arabic and English.
- Treat the PDPC's rules as binding on the state. Obtain the licences and permits the regime describes, and disclose the app's breach-notification process.
- Set limits on the AI assistant. If the promised assistant will read user documents or transaction history, say so, and keep its data separate from other agencies' systems.
- Publish service-level data. If the app delivers faster passports, show it: processing times by mission, complaint counts and resolution rates.
The Foreign Ministry has built something citizens may actually want. Whether it becomes a model for e-government or a template for compulsory data collection will depend on commitments it can make now, at little cost, before the pilot grows beyond 17 missions.