Four years after Egypt’s data protection law was issued, most provisions remain suspended, leaving citizens’ data exposed without effective protection.