Well regarded for its ability to combine ‘technical excellence with a personalised and innovative approach to its clients’ challenges’, Morais Leitão, Galvão Teles, Soares da Silva & Associados‘ team is a trusted adviser for clients navigating every stage of data protection work, from compliance strategies to investigations and disputes. The team’s strength lies in its collaborative, cross-practice approach, bringing together expertise from TMT, employment, criminal, corporate, and insurance law. Steering the practice is the ‘exceptional professional’ Tiago Félix da Costa, who handles the full gamut of data protection matters. Elsewhere in the team, Helena Tapp Barroso stands out for her work in tech, banking, insurance, pharmaceuticals and automotive sectors, while Maria da Assunção da Cunha Reis is frequently engaged by companies to create compliance policies and programmes.
Data privacy and data protection in Portugal
Morais Leitão, Galvão Teles, Soares da Silva & Associados
Praxisleiter:
Tiago Félix da Costa
Weitere Kernanwälte:
Helena Tapp Barroso, Maria Assunção da Cunha Reis
Referenzen
‘A spirit of partnership put into practice on a daily basis; technical competence and ability to approach the business, with unquestionable availability. Impeccable ethical positioning.’
‘I would like to highlight, with pleasure, the names of Tiago Félix da Costa and Maria Assunção da Cunha Reis.’
‘Uniquely combines academic knowledge and rigour with the practice of law, which allows it to achieve a very high standard. Another differentiator is the human qualities of its lawyers, starting with the partners.’
Highlight-Mandate
VdA
Praised for its ‘high level of expertise’ and ‘pro-client approach’, the privacy and data protection team at VdA, which is seamlessly integrated within the firm’s broader information, communication, and technology group, is able to assist on the full gamut of matters. Counting leading players in retail, healthcare, energy, insurance, transport, banking, and gambling among its key clients, the team excels in both domestic and cross-border mandates. Practice head Magda Cocco is a key port of call for companies and public entities across a range of sectors seeking assistance on digital economy legal issues. Inês Antas De Barros is noted for her focus on data economy, data protection, privacy and information security, while Maria De Lurdes Gonçalves stands out for her work on both domestic and international mandates, focusing on privacy and data protection, data economy, cybersecurity and electronic communication-related work.
Praxisleiter:
Magda Cocco
Weitere Kernanwälte:
Inês Antas de Barros, Maria de Lurdes Gonçalves, Inês Melo
Referenzen
‘The breadth of the team is reassuring as there will always be some resource to ensure a response, even during periods of vacation or leave; there will be a multidisciplinary approach with resources from other professionals and lawyers specialising in other areas of knowledge, whenever necessary.’
‘Maria de Lurdes Gonçalves – attention to detail, focus on solutions, knowledge, availability and accessibility.’
‘The VdA law firm stands out, firstly, for the high level of expertise of the team, which is reflected in interactions with the client and in the solutions and action plans presented. All approaches suggested by the VdA team are tailored to the company’s specific needs and improve the work efficiency of the client’s internal team.’
Kernmandanten
321 Crédito
AGEAS Group
Altice Group
APS – Associação Portuguesa de Seguradores
Banco CTT
Bial – Portela & Cª, S.A.
Brisa Group
Center for Responsible AI
CTT Group
CUF
EDP Group
European Space Agency (ESA)
E-REDES – Distribuição de Eletricidade, S.A.
Fresenius Kabi Pharma PT
Fundação Calouste Gulbenkian
Galp Energia, SGPS, S.A.
Gilead
IQVIA
José de Mello Group
Luís Simões
Lusíadas Saúde
Luz Saúde
MEO – Serviços de Comunicações e Multimédia S.A.
Mudum
ProChild Lab
Sistemas McDonald’s Portugal, Lda.
Sport Lisboa e Benfica Group (SLB)
VIA Outlets Portugal
Vodafone Portugal
Sonae Sierra S.A.
Zurich Insurance
Highlight-Mandate
- Advised CTT on the implementation and launch of a project for the commercialisation of a new online subscription service for savings certificates, through the assessment of complex regulatory and data protection implications.
- Advised several entities in the healthcare, insurance and banking & finance sectors in managing and responding to data breaches and security incidents.
- Advised Lusíadas Saúde Group in the acquisition of a group of dental clinics that belonged to a major Portuguese group of companies, covering all legal and regulatory risks arising from accessing and sharing health data in the context of M&A operations.
DLA Piper ABBC
Domestic and multinational companies from an array of sectors, including tech, energy, life sciences, industrials and retail, frequently turn to DLA Piper ABBC for advice on GDPR compliance and data privacy-related commercial and litigation matters. The group is jointly led by João Costa Quinta, a commercial contracts and privacy law specialist, and Daniel Reis, recognised for his in-depth knowledge of data protection issues, including data breaches and GDPR compliance. Margarida Leitão Nogueira, who is especially active in the life sciences, consumer goods and tech sectors, is another name to note for privacy and cybersecurity mandates.
Praxisleiter:
João Costa Quinta; Daniel Reis
Weitere Kernanwälte:
Margarida Leitão Nogueira; Vanessa Patrocínio
Kernmandanten
EDP
NielsenIQ
Marktest
Multipessoal
PPG Dyrup
Metro Markets
Yamaha
Michael Page
iMM
Randstad
Ibersol
Highlight-Mandate
- Advising EDPR on data protection matters worldwide.
- Advising NielsonIQ on a regular basis.
- Advising Ibersol on a regular basis.
PLMJ
A regular port of call for a number of large corporations, PLMJ‘s dedicated practice showcases demonstrable experience in cross-border compliance projects, audits, data breaches, litigation and the data protection aspects of high-value M&A. Practice head Pedro Lomba advises across a range of regulated sectors, including media, electronic communications, health, AI and advertising. A litany of major corporates turn to Inês Dias Pinheiro for her expertise in challenging data privacy and data protection compliance matters, and Marta Salgado Areias is noted for her expertise in IP, consumer law and IT matters.
Praxisleiter:
Pedro Lomba
Weitere Kernanwälte:
Inês Dias Pinheiro, Marta Salgado Areias, Rita de Sousa Costa, Nádia da Costa Ribeiro
Referenzen
‘Nádia da Costa Ribeiro presents excellent technical knowledge in the area of data protection and the specific topics that were addressed, in addition to an above-average dedication to the topics that are under her coordination.’
‘Nadia always seeks to find the best legal solutions to the questions raised in order to achieve the desired objectives, putting into practice your legal creativity whenever necessary.’
‘The team has a 360º view of the customer. Flexible and available for tailor-made solutions.’
Kernmandanten
TikTok
Microsoft
Danone
Apple
Empark Group
Securitas
Ford
Meta
Impresa
Herbalife
Glovo
Ascendi
CateringPor
StartCampus
United Investments Portugal
Tabaqueira (Philip Morris International)
H&M
Defined.ai
Flixbus
REN
Angola Cables
Highlight-Mandate
- Assisting Defined.ai regularly in reviewing contracts with clients, licensing agreements and advising on data and IP matters.
- Advised Microsoft’s Portuguese subsidiary on a legal dispute centred around exercising the right to be forgotten regarding Bing’s search engine.
- Advising H&M on data protection, image rights, and associated contractual terms.
SRS Legal
Highlighted for its ‘technical expertise’ and ‘deep understanding of both Portuguese and European regulatory frameworks’, SRS Legal advises clients across the TMT, banking, insurance and life sciences sectors. The team excels in navigating complex matters, from ensuring GDPR compliance and drafting data-sharing agreements to managing high-stakes regulatory investigations. Practice head Luís Neto Galvão , who is lauded for his ‘deep knowledge’ and ‘remarkable ability to understand his clients’ business models.’ Giorgio Galli is frequently engaged by Italian clients active in the tech, media and telecoms sectors.
Praxisleiter:
Luís Neto Galvão
Weitere Kernanwälte:
Giorgio Galli; Filipe Oliveira Casqueiro
Referenzen
‘This law firm stands out for its exceptional quality of service and a collaborative culture that ensures personalised attention and innovative solutions in the field of data protection.’
‘The team’s technical expertise, particularly in compliance and privacy matters, combined with their deep understanding of both Portuguese and European regulatory frameworks, enables them to provide top-tier legal advice in this critical and strategic area for businesses.’
‘Luis Neto Galvão stands out for his solid experience in Data Protection and strategic approach, while Filipe Oliveira Casqueiro is noted for his technical precision and handling of regulatory matters. Both are highly recommended for their knowledge and client commitment.’
Kernmandanten
iBASIS
NAU – Highgate Group
Associação Mutualista Montepio Geral
GALP
Rubis
SAS Apostas Sociais, Jogos e Apostas Online (Group Misericórdia de Lisboa) Corticeira Amorim
Binary Subject (360 Imprimir)
BT Portugal
ANOVA
Goldenergy
Barrancos Municipality
Highlight-Mandate
- Advised iBasis in relation to the privacy aspects of a cybersecurity service provided to telecoms operators, which identifies and eliminates fraudulent SMS messages.
- Undertaking the implementation of GDPR in the Highgate Group, which includes 7 NAU hotels and two Hilton managed by Highgate, including a GAP Analysis and the implementation of data protection policies.
- Submitted on behalf of Joaquim Chaves Saúde a complaint with the Data Protection Authority (DPA) against the Portuguese Competition Authority concerning several breaches of data protection obligations in a dawn raid undertaken on JCS.
Abreu Advogados
Fielding a ‘dedicated and committed team’ that is ‘technically competent and very up-to-date’, Abreu Advogados remains a strong choice for household name companies seeking assistance with cross-border data transfers, GDPR compliance, audits and privacy policies. The team is spearheaded by Ricardo Henriques, who stands out for his work on matters related to IP, IoT, personal data protection, media and advertising and telecoms. César Bessa Monteiro, jr has vast experience in matters related to innovation, inventions, brands, trade secrets and unfair competition. José Maria Alves Pereira has vast experience on compliance projects regarding growing technologies, software development agreements and e-commerce platforms.
Praxisleiter:
Ricardo Henriques
Weitere Kernanwälte:
César Bessa Monteiro, jr, José Maria Alves Pereira
Referenzen
‘Cutting-edge firm, with a dedicated and committed team, technically competent and very up-to-date, always ahead of the main trends. Fair, honest, expected and controlled rates, which allow for good management of customer budgets. Effective, practical and clear support that meets real-world needs.’
‘Ricardo Henriques. They know the business reality, especially industry and innovation – they go straight to the customer’s needs, providing effective support, without waste or theoretical impasses.’
‘High level of expertise and great relationship with the team. Flexibility on invoicing too.’
Kernmandanten
Acciona
Bial
Casio
Coca-Cola
Colt Technology Services
CooperVision
Daimler
Enterprise
Essity
Federal Express (Fedex)
Fresenius SE & Co Kgaa
Genpact (Pnmsoft)
Globalvia
Ikea Group
Lidl & Companhia
Mitsubishi Motors Corporation
Netflix
Porsche
Primark
Robert Bosch GmbH
Sap
Sitel
Thea Laboratoires
Veolia
Visa
Vodafone
Highlight-Mandate
- Assisting Porsche in several projects related to their online business and connected car services, on a global level.
- Advising Primark in respect of data protection project related with communication tools for employees.
- Assisting LIDL on data protection and cybersecurity matters.
CCA Law Firm
Lauded for its ‘very practical approach’, the data protection team at CCA Law Firm assists clients with a range of matters, including GDPR compliance, privacy policies and data processing arrangements. The team is jointly led by Filipe Mayer, who is noted for his focus on gaming and online betting, as well as in the area of esports; Martim Bouza Serrano, who draws praise for ‘clearly explaining complex issues’; and Rita Serrano, who has a proven track record of advising clients on compliance with complex regulatory frameworks such as GDPR, and other global data protection laws.
Praxisleiter:
Filipe Mayer; Martim Bouza Serrano; Rita Serrano
Referenzen
The team is dynamic, knowledgeable and available.’
‘Martim Bouza Serrano is a very experienced lawyer and capable of clearly explaining complex issues.’
‘The services are provided with excellent quality, both in content and form, anticipating issues that may be relevant. What makes CCA stand out is its pro-client and very practical approach to delivering the work requested, which is essential for a large and very dynamic company, which raises dozens of legal questions every day.’
Kernmandanten
Vodafone
IBM
Sephora
P&G
Havas Group
Fullsix Portugal
Medialivre, S.A.
C&A
Colep Packaging
JTI – Tabaco
Sendit
Special Variable
Jimpisoft
Europcar
Highlight-Mandate
CMS
With a client roster that includes major domestic and multinational companies, CMS is highly experienced in cross-border compliance, data transfers, GDPR-related matters, and privacy policies. The practice is jointly steered by José Luís Arnaut , who has extensive experience providing strategic advice to public and private companies, and João Leitão Figueiredo, who is well versed in contentious, transactional and day-to-day data protection and privacy advice.
Praxisleiter:
José Luís Arnaut; João Leitão Figueiredo
Weitere Kernanwälte:
Ricardo Pintão, Sara Rocha
Referenzen
‘Agility, coherence and security.’
‘The team is strong in data protection. They have sophisticated clients and provide reliable, quick solutions.’
‘Ricardo Pintão is specially qualified in data protection.’
Kernmandanten
CEPSA
Repsol
Mercedes-Benz Financial Services Portugal
Galp Group
EDP Group
Delta Cafés (Nabeiro Group)
Bensaude Group
Essilor Portugal
DaVita Group
NAV Portugal
Angelini Group
Fromageries Bel (Bel Group)
IKEA Industries
Abanca Corporacion Bancaria, Sucursal em Portugal
VINCI Energies
Solera Group (Audatex)
SRT Group (Stuart)
Keller Williams (Portugal)
Highlight-Mandate
- Advising CEPSA on an extensive and demanding compliance and technological development project intended to modernise the business structure as well as to safeguard information systems and personal data.
- Advising All Win on assessing the licensing terms of the Command Platform in the Portuguese market in the context of the various layers of Franchising terms and taking into consideration the internal development of the Command Platform by KW RI.
CS’Associados
CS’Associados fields a team of ‘ highly qualified’ professionals, noted for its ability to assist clients across a range of data privacy matters. Spearheading the team is Jorge Silva Martins , who stands out for his ‘pragmatic vision’ and ‘ability to identify essential issues.’
Praxisleiter:
Jorge Silva Martins
Weitere Kernanwälte:
João Carminho, Inês Coré
Referenzen
‘The CS’Associados team is highly qualified to advise in the areas of privacy and personal data protection, providing rigorous legal advice.’
‘Jorge Silva Martins is the partner responsible for the area and an expert on the subject. Results-oriented and capable of providing tailored solutions. Dedicated and assertive, he is always available to answer any questions.‘
‘A highly qualified, creative and innovative work team, which, more than a mere legal opinion, knows the client from end to end, seeking the best alternative for company and sector in question. They are very available and business-oriented professionals.’
Highlight-Mandate
Cuatrecasas
Renowned for its ‘global and competent vision’, Cuatrecasas specialises in privacy matters related to sensitive healthcare data and provides strategic advice to clients in the telecoms, hardware, banking, technology, and retail industries. Practice head Joana Mota Agostinho earns praise for her excellent technical and personal skills’, standing out for her experience advising a broad range of organisations on data privacy matters.
Praxisleiter:
Joana Mota Agostinho
Weitere Kernanwälte:
Lavínia Marques; Catarina Castanheira Lopes
Referenzen
‘Provides the best customer service, whether technically or economically.’
‘Specialisation and response readiness.’
‘Cuatrecasas has been providing an excellent advisory service. The team has a global and competent vision in relation to the work to be developed, promotes benchmarking and has skills in the regulatory scope that are crucial for the compliance of the implemented process.’
Kernmandanten
Hikma
Correos Express
Novo Nordisk
CUF
BMW Portugal
Volkswagen Autoeuropa
Galp
Roche
IPO Coimbra
Huawei
Outsystems
Globo
Grupo Porto Editora
Auto-Estradas do Atlântico
DHL
Grupo Sogrape
Volkswagen Autoeuropa
ONI
Nowo
Farfetch
TAP
Infraestruturas de Portugal
Águas de Portugal
Fundação Champalimaud
Highlight-Mandate
- Advised TAP on data protection and regulatory compliance.
- Advised Huawei on personal data protection, including compliance with privacy laws and regulations.
- Advised Galp Energia on data protection matters.
Garrigues Portugal
Standing out for its ‘pro-client and very practical approach’, the team at Garrigues Portugal is highly experienced in handling a range of data protection matters, including data processing agreements, M&A transactions, privacy policy issues, data breaches, and proceedings before the Portuguese Data Protection Authority (CNPD). Practice head Manuel Liberal Jerónimo is noted for his experience in international commercial contracts, including distribution contracts, notably linked to the TMT sector.
Praxisleiter:
Manuel Liberal Jerónimo
Weitere Kernanwälte:
Luísa Cyrne, Matilde Bettencourt, Rute Silva Gomes
Referenzen
‘Quality, speed and availability.’
‘The services are provided with excellent quality, both in content and form, anticipating issues that may be relevant. What makes Garrigues stand out is its pro-client and very practical approach to delivering the work requested, which is essential for a large and very dynamic company, which raises dozens of legal questions every day.’
‘The expertise is notable, which gives a lot of confidence in the legal analysis received.’
Kernmandanten
Samsung
L’Oreal
Volvo
Endesa
Honda Motor Europe
Iberdrola
Jaguar
Inditex Group
JLL group
Angelini
Robert Bosch
CBRE
Polestar
Apax/Gamalife
Henderson Park
Evox Technologies
Neuraspace
Idealista
Highlight-Mandate
- Advising the Portuguese affiliate of a manufacturer of consumer electronics by revenue in data protection matters.
- Preparing the group’s VDD for Portugal on several data protection matters and carrying out certain compliance procedures in connection therewith, all within the scope of the purchase of a majority stake in Idealista by the private equity firm, CINVEN.
- Assisting the English private equity real estate manager in the implementation of an APP to manage the Lagoas Park resort (including advice from a data protection perspective.
Sérvulo & Associados
The ‘excellent’ team at Sérvulo & Associados is highly regarded for its expertise in data protection, with particular strength in GDPR compliance projects, audits, and drafting data processing and transfer agreements. The team is led by a skilled trio of experts: Ana Rita Painho, who regularly assists multinational companies on data privacy issues; José Lobo Moutinho, who is recommended for his contentious experience; and João Carmona Dias, who remains active across the IT, healthcare, electronics, distribution and energy sectors.
Praxisleiter:
Ana Rita Paínho; José Lobo Moutinho; João Carmona Dias
Weitere Kernanwälte:
Ana Mira Cordeiro, Inês de Sá
Referenzen
‘Approach oriented towards the final result and an interpretation aligned and framed with best practices, as well as integration with other business areas.’
‘João Carmona Dias for his approach focused on concrete and well-prepared aspects.’
‘The team demonstrated high knowledge of GDPR matters, which were very relevant to the work in progress.’
Kernmandanten
EDP, S.A.
Grünenthal, S.A.
Grünenthal Corporate Hub, Unipessoal, Lda.
Senseidata, S.A.
Lusa – Agência de Notícias
Teva Group
Banco BIC Português, S.A.
LG Electronics Portugal
Hitachi Portugal
Signify Portugal
Ferreo Ibérica
SPMS – Serviços Partilhados do Ministério da Saúde E.P.E.
Abbott Laboratórios, Lda.
Highlight-Mandate
- Assisting Senseidata on data privacy impact assessments, drafting of data processing agreements for clients and policies and assessment on possibility of collection of personal data.
- Providing software and privacy /data protection matters advice to EDP.
- Advising The Grünenthal Corporate Hub in GDPR compliance, including auditing procedures, training, and creation/update of existing procedures.