A sovereignty plan that admits its limits
In an October 2026 review of the Digital Egypt 2030 roadmap, ICT Minister Raafat Hendy said Egypt will build five to seven mega data centres over four to five years as part of its digital sovereignty goals. Some are expected to be operating and exporting services by 2030, according to W.Media's report of the ministry's press release. He also described 'absolute' digital sovereignty as an unrealistic benchmark for any country. He framed sovereignty as resting on sovereign infrastructure, cybersecurity, AI and data protection, and said it does not mean decoupling from the global ecosystem.
That last point matters more than the megawatt figures. Many governments reach for data-localisation mandates when they say 'sovereignty'. Egypt's minister, on this reporting, is describing something closer to capacity and bargaining power.
The strongest case for sovereignty
The case for caution about foreign-hosted data is serious. A country whose government records, health data and financial flows sit on servers under another jurisdiction's legal reach has limited recourse if access is disrupted or compelled. Egypt has also long been a transit country, not a destination, for internet traffic: ten new subsea cables were added over the past decade and six more are under construction, per Arab Finance. Turning that cable position into compute capacity is a coherent industrial strategy, not just a nationalist reflex.
What is actually being built
Two private projects anchor the plan, and both are commercial rather than state-owned.
- Kemet Data Center. Intro Group plans nearly $270 million for the first phase of an 80MW facility in the Sokhna zone of the Suez Canal Economic Zone. Daily News Egypt reported on 23 September 2026 that engineering designs are complete and supplier contracts signed, and that Intro is targeting Tier III classification.
- Africa Data Centres Egypt. Vodafone Business, Elsewedy Electric and Cassava Technologies announced a venture that starts at 20MW and is planned to reach 200MW, with total investment of up to $1 billion, per W.Media's 8 September 2026 report.
The market is starting from a small base. W.Media cites Arizton estimates that Egypt's data centre market was worth $305 million in 2025 and could reach $865 million by 2031. That is a third-party projection, not an official forecast, but it shows the scale: private capital is already committing at roughly the size of the whole current market.
Where the policy risk sits
The risk is not the buildout. It is what rules attach to the data these facilities will hold, and whether those rules are predictable enough to attract the export business the ministry wants.
Egypt's Personal Data Protection Law, Law No. 151 of 2020, is the main statute. This is a law-firm translation of the text, not the Official Gazette original. It defines 'cross-border personal data flow' broadly. The definition covers not only transfer but also storage, retrieval and processing of personal data moving between Egypt and outside it, in either direction. It also defines licences, valid for three years, and shorter permits for collecting, storing, transferring or processing personal data. A data centre operator serving regional customers could therefore fall under these provisions both when it brings foreign data in and when it sends Egyptian data out.
The law's Article 3 also exempts personal data held by national security authorities, and lets the Personal Data Protection Center, on those authorities' request, order a controller or processor to amend, erase, withhold or suspend circulation of data. Governments have legitimate security interests, and this is not unusual by itself. But a foreign enterprise deciding where to host regional workloads will price that discretion. The 'exporting services' goal depends on customers believing their data is handled under clear, reviewable rules.
The ministry has said it is preparing an integrated national strategy for data centres, according to the W.Media report on the Vodafone venture. The coverage I reviewed describes no licensing regime, no power-supply plan and no data-localisation rule. Those gaps are where the plan will be tested. A 200MW campus is a large electricity load, and none of the reporting says how that supply will be secured. Elsewedy's role is described only as energy and infrastructure expertise.
What proportionate policy looks like
First, resist converting 'sovereignty' into blanket localisation. Hendy's own framing, that sovereignty does not mean decoupling, points the right way. Requirements for genuinely sensitive government and critical-sector data are defensible. Extending them to commercial workloads would shrink the addressable market for facilities whose business case rests on regional and international customers.
Second, publish the national data centre strategy with concrete, checkable commitments: licensing timelines, the criteria for cross-border transfer approvals, and how national-security data orders are made and challenged. Investors can price a strict rule. They cannot price an undefined one.
Third, treat power and permitting as policy, not an afterthought. The five-to-seven-centre target is only credible if grid and renewable capacity are planned alongside it.
The bottom line
Egypt's minister has taken the more pragmatic side of the sovereignty debate: build capacity, stay connected, and accept that no country controls its digital stack alone. The money is moving: private investors have committed hundreds of millions of dollars against a market that Arizton puts at $305 million today. Whether the 2030 export ambition is met will turn on the transfer, licensing and security rules still to be written, not on the megawatts alone.