DPA case Deliberação 2019/495 – Violation Found (Portugal, 2019)

Violation Found
Commission Nationale pour la Protection des Données3 September 2019Portugal
final
Violation Found

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Portuguese data protection authority rejected requests from public entities to waive penalties for privacy violations. They stated that such requests can only be considered after an unlawful act has been confirmed. This matters because it reinforces the principle that accountability is essential in data protection.

What happened

Public entities sought to avoid penalties for privacy violations without being under investigation.

Who was affected

Public entities in Portugal that requested waivers for potential penalties.

What the authority found

The authority determined that waiver requests must follow an established administrative offense procedure.

Why this matters

This decision emphasizes the importance of accountability in data protection and ensures that entities cannot evade consequences without proper procedures.

National Law Articles
AI-identified
Art. 44(2) Lei 58/2019
Art. 59 Lei 58/2019

Source checks

Linked-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Several Portuguese public entities requested the DPA to waive the imposition of fines for a period of three years, citing Article 44(2) and Article 59 Law 58/2019, despite no administrative offense proceedings being initiated against them. The DPA determined that such a waiver can only be requested after an administrative offense accusation, in the context of a specific administrative offence procedure. This is because only once an unlawful act has been verified and its severity assessed can there be a balanced consideration of the data subjects' rights and the public interests protected by the violated rules, alongside the specific circumstances of the offender and the public interest affected by the penalty. In this regard, the DPA determined that all requests for waiving penalties submitted outside of an ongoing administrative offense proceeding would not be considered.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case Deliberação 2019/495 in PT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

3 September 2019

Authority

Commission Nationale pour la Protection des Données

GDPRhub ID

gdprhub-8339

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case Deliberação 2019/495 - Portugal (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: