The Portuguese Securities Market Commission (CMVM) has published some clarifications on the regulatory framework for "finfluencers", i.e. influencers who use their social media accounts...

A new law providing procedures for monitoring, control, removal and prevention of access to protected content in a digital environment was published on the 30th of November.

Law 46/2018 of 13 August 13 has now been published.

The European Commission's adequacy decision in relation to the new rules on transfer to the United States of the data of data subjects who are citizens of the European Union.

In this Circular, the APD instructs public and private entities that process personal data to "scrupulously" comply with the rules contained in (i) the Law on the Protection of Personal Data...

As of 17 January 2025, Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience...

A hospital became one of the first organisations to face GDPR enforcement in Portugal in July 2018.

On 16 November, ANACOM, the national regulatory authority (NRA) in Portugal for communications, approved the Multi-Year Activity Plan for the three-year period 2024-2026 ("Plan").

On 4 December, Decree-Law 125/2025 was published, establishing the new legal framework for cybersecurity (the "Cybersecurity Legal Framework" or "CLF").

The National Digital Strategy Action Plan for 2026–27 ('Action Plan') forms the core of Portugal's digital transformation agenda for the next two years.

This Regulation replaces the European Parliament and Council Report, which identified shortcomings and inconsistencies in various areas, such as provisions on chemicals and difficulties in market surveillance, among others.

The directive seeks to improve the protection of critical infrastructure against different threats and to harmonise cross-border cooperation between competent authorities.

Internal investigations have become essential for organizations facing increased legislative requirements and reputational risks. This guide examines the challenges and merits of conducting internal investigations, offering a roadmap for organizations to navigate suspicious incidents, ensure legal compliance, and protect stakeholder interests.

Cybersecurity Comparative Guide for the jurisdiction of Portugal, check out our comparative guides section to compare across multiple countries

Data Privacy Comparative Guide for the jurisdiction of Portugal, check out our comparative guides section to compare across multiple countries