On July 5, 2023, the Portuguese data protection authority (CNPD) announced that it is seeking public comments on its draft Multi-Annual Plan of Activities for the period of 2024-2026. In particular, the CNPD noted that the plan is based on three main strategic objectives, namely: 

• strengthening the protection of citizens' personal data; 
• assessing the opportunities and risks posed by technological innovation; and  
• strengthening the regulation of personal data in Portugal through cooperation with national and international bodies. 

The CNPD invited all interested parties, data subjects, and public and private organizations, in their capacity as data controllers and data protection officers, to give their opinions on the plan and suggest important issues they believe the CNPD should prioritize in their activities. 

Comments can be submitted via email to [email protected] until July 15, 2023.  

You can read the press release here and the plan here, both only available in Portuguese. 

Update: July 31, 2023 

CNPD approves 2024 to 2026 activity plan

On July 27, 2023, the Portuguese data protection authority (CNPD) announced that it had approved its multi-annual plan of activities for 2024 to 2026, and strategic actions of the 2024 plan of activities, following the closure of the public consultation period. 

Additionally, the CNPD published a report on the public consultation exercise, including the contributions it received from various stakeholders. 

You can read the press release here, the report here, and the plan here all only available in Portuguese.