DPA case Deliberação 2019/495 – Violation Found (Portugal, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Portuguese data protection authority rejected requests from public entities to waive penalties for privacy violations. They stated that such requests can only be considered after an unlawful act has been confirmed. This matters because it reinforces the principle that accountability is essential in data protection.
What happened
Public entities sought to avoid penalties for privacy violations without being under investigation.
Who was affected
Public entities in Portugal that requested waivers for potential penalties.
What the authority found
The authority determined that waiver requests must follow an established administrative offense procedure.
Why this matters
This decision emphasizes the importance of accountability in data protection and ensures that entities cannot evade consequences without proper procedures.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Several Portuguese public entities requested the DPA to waive the imposition of fines for a period of three years, citing Article 44(2) and Article 59 Law 58/2019, despite no administrative offense proceedings being initiated against them. The DPA determined that such a waiver can only be requested after an administrative offense accusation, in the context of a specific administrative offence procedure. This is because only once an unlawful act has been verified and its severity assessed can there be a balanced consideration of the data subjects' rights and the public interests protected by the violated rules, alongside the specific circumstances of the offender and the public interest affected by the penalty. In this regard, the DPA determined that all requests for waiving penalties submitted outside of an ongoing administrative offense proceeding would not be considered.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case Deliberação 2019/495 in PT
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
3 September 2019
Authority
Commission Nationale pour la Protection des Données
GDPRhub ID
gdprhub-8339About this data
Cite as: Cookie Fines. DPA case Deliberação 2019/495 - Portugal (2019). Retrieved from cookiefines.eu
Last updated: