Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Portugal: CNPD publishes guidelines on technical and organisational measures on processing of personal data

The Portuguese data protection authority ('CNPD') announced, on 27 January 2023, that it had published guidelines on organisational and security measures applicable to the processing of personal data. In particular, the CNPD highlighted that the growing number of attacks on information systems in the last year have mostly affected personal data, and that such security incidents have shown that if organisations had been equipped with adequate security measures, the risks would have been lower and the impact on the rights of data subjects would have been reduced. Moreover, the CNPD detailed that the guidelines are aimed at data controllers and processors, intending to make them aware of their legal obligations in the field of security of processing and the need to make a greater investment in this area.

You can read the press release here and download the guidelines here, both only available in Portuguese.