Portugal CNPD

Lusophone Data Protection Network Launches Official Website

CNPD announced the launch of the official website for the Rede Lusófona de Proteção de Dados Pessoais (RLPD), a network of Lusophone data protection authorities. The RLPD now comprises Angola, Brazil, Cabo Verde, Macau, Portugal, and São Tomé and Príncipe. The platform aims to promote cooperation, dialogue, information sharing, and knowledge transfer among member authorities.

EDPB and EDPS Joint Opinion on EU Biotechnology Regulation with Health Data Safeguards

The European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) adopted Joint Opinion 3/2026 on the EU Commission's proposed Biotechnology Regulation (Biotech Act). The opinion supports harmonization of clinical trials under the Clinical Trials Regulation while calling for specific safeguards for health and genetic data. Key recommendations include clarifying data controller roles, limiting data retention periods to the trial master file, establishing precise purposes and safeguards for secondary use of clinical trial data, ensuring consistency with the AI Regulation, and requiring technical measures such as pseudonymization.

CNPD Participates in 2026 EU Coordinated Enforcement on Transparency Obligations

CNPD (Portugal) announces participation in the 2026 Coordinated Enforcement Framework (CEF) led by the European Data Protection Board (EDPB). Twenty-five EU data protection authorities will jointly investigate compliance with GDPR transparency obligations under Articles 12, 13, and 14. Data controllers across various sectors will be contacted through enforcement actions and investigations, with results aggregated into a consolidated European report containing compliance assessments and recommendations.

CNPD President Attends 50th Anniversary of Portuguese Constitution

The President of Portugal's National Data Protection Commission (CNPD) attended a ceremonial session marking the 50th anniversary of the Portuguese Constitution at the Assembly of the Republic on April 2, 2026. The CNPD highlighted that the fundamental right to personal data protection is enshrined in Article 35 of the Portuguese Constitution, noting Portugal's pioneering role as the first country globally to constitutionalize this right.

EDPB EDPS Adopt Joint Opinion 4/2026 on CSA2 and NIS2 Proposals

EDPB and EDPS adopted Joint Opinion 4/2026 on the Cybersecurity Act 2 (CSA2) proposal and NIS2 directive amendments. The opinion supports strengthening EU cybersecurity while ensuring data protection alignment. CNPD participated in the drafting. The opinion recommends a single entry point for data breach notifications to reduce administrative burdens and designates European digital identity wallets as essential entities.