🇵🇹

GDPR Fines in Portugal

3 data protection authorities · Since 2017

Total Actions

17

Total Fines

€6.8M

Average Fine

€683K

Among actions with fines

Enforcement Trend

Stable

About Data Protection Enforcement in Portugal

Portugal is an emerging jurisdiction in European GDPR and data-protection enforcement, with 3 data protection authorities overseeing compliance since 2017. To date, Portugal's regulators have taken 17 enforcement actions totaling €6,831,000 in fines. The landmark case was a €4,300,000 fine against Portuguese National Statistical Institute in 2022, among the most significant GDPR and data-protection penalties recorded for this jurisdiction. Enforcement activity has maintained a consistent pace, reflecting a steady regulatory approach to GDPR and data-protection oversight. The most frequently enforced violations are cookies placed before consent (1 cases), third-party cookies without consent (1 cases), reflecting the regulatory focus areas in this jurisdiction.

Enforcement Actions by Year

YearActionsTotal Fines
20171€0
20182€800K
20194€131K
20201€0
20213€1.3M
20224€4.7M
20241€0
20251€0

Frequently Asked Questions

How many GDPR and data-protection enforcement actions has Portugal issued?

Portugal has issued 17 enforcement actions related to GDPR and data-protection, totaling €6.8M in fines.

What is the largest GDPR and data-protection fine in Portugal?

The largest recorded penalty was a €4.3M fine against Portuguese National Statistical Institute on 2022-11-02.

How many data protection authorities operate in Portugal?

Portugal has 3 data protection authorities overseeing GDPR and data-protection enforcement.

Is GDPR and data-protection enforcement stable in Portugal?

GDPR and data-protection enforcement in Portugal has been relatively stable over recent years.