Data privacy and data protection in Portugal

Morais Leitão, Galvão Teles, Soares da Silva & Associados

Well regarded for its ability to combine ‘technical excellence with a personalised and innovative approach to its clients’ challenges’, Morais Leitão, Galvão Teles, Soares da Silva & Associados‘ team is a trusted adviser for clients navigating every stage of data protection work, from compliance strategies to investigations and disputes. The team’s strength lies in its collaborative, cross-practice approach, bringing together expertise from TMT, employment, criminal, corporate, and insurance law. Steering the practice is the ‘exceptional professional’ Tiago Félix da Costa, who handles the full gamut of data protection matters. Elsewhere in the team, Helena Tapp Barroso  stands out for her work in tech, banking, insurance, pharmaceuticals and automotive sectors, while Maria da Assunção da Cunha Reis is frequently engaged by companies to create compliance policies and programmes.

Praxisleiter:

Tiago Félix da Costa


Weitere Kernanwälte:

Helena Tapp Barroso, Maria Assunção da Cunha Reis


Referenzen

‘A spirit of partnership put into practice on a daily basis; technical competence and ability to approach the business, with unquestionable availability. Impeccable ethical positioning.’

‘I would like to highlight, with pleasure, the names of Tiago Félix da Costa and Maria Assunção da Cunha Reis.’

‘Uniquely combines academic knowledge and rigour with the practice of law, which allows it to achieve a very high standard. Another differentiator is the human qualities of its lawyers, starting with the partners.’

Highlight-Mandate


VdA

Praised for its ‘high level of expertise’ and ‘pro-client approach’, the privacy and data protection team at VdA, which is seamlessly integrated within the firm’s broader information, communication, and technology group, is able to assist on the full gamut of matters. Counting leading players in retail, healthcare, energy, insurance, transport, banking, and gambling among its key clients, the team excels in both domestic and cross-border mandates. Practice head Magda Cocco is a key port of call for companies and public entities across a range of sectors seeking assistance on digital economy legal issues. Inês Antas De Barros is noted for her focus on data economy, data protection, privacy and information security, while Maria De Lurdes Gonçalves stands out for her work on both domestic and international mandates, focusing on privacy and data protection, data economy, cybersecurity and electronic communication-related work.

Praxisleiter:

Magda Cocco


Weitere Kernanwälte:

Inês Antas de Barros, Maria de Lurdes Gonçalves, Inês Melo


Referenzen

‘The breadth of the team is reassuring as there will always be some resource to ensure a response, even during periods of vacation or leave; there will be a multidisciplinary approach with resources from other professionals and lawyers specialising in other areas of knowledge, whenever necessary.’

‘Maria de Lurdes Gonçalves – attention to detail, focus on solutions, knowledge, availability and accessibility.’

‘The VdA law firm stands out, firstly, for the high level of expertise of the team, which is reflected in interactions with the client and in the solutions and action plans presented. All approaches suggested by the VdA team are tailored to the company’s specific needs and improve the work efficiency of the client’s internal team.’

Kernmandanten

321 Crédito


AGEAS Group


Altice Group


APS – Associação Portuguesa de Seguradores


Banco CTT


Bial – Portela & Cª, S.A.


Brisa Group


Center for Responsible AI


CTT Group


CUF


EDP Group


European Space Agency (ESA)


E-REDES – Distribuição de Eletricidade, S.A.


Fresenius Kabi Pharma PT


Fundação Calouste Gulbenkian


Galp Energia, SGPS, S.A.


Gilead


IQVIA


José de Mello Group


Luís Simões


Lusíadas Saúde


Luz Saúde


MEO – Serviços de Comunicações e Multimédia S.A.


Mudum


ProChild Lab


Sistemas McDonald’s Portugal, Lda.


Sport Lisboa e Benfica Group (SLB)


VIA Outlets Portugal


Vodafone Portugal


Sonae Sierra S.A.


Zurich Insurance


Highlight-Mandate


  • Advised CTT on the implementation and launch of a project for the commercialisation of a new online subscription service for savings certificates, through the assessment of complex regulatory and data protection implications.
  • Advised several entities in the healthcare, insurance and banking & finance sectors in managing and responding to data breaches and security incidents.
  • Advised Lusíadas Saúde Group in the acquisition of a group of dental clinics that belonged to a major Portuguese group of companies, covering all legal and regulatory risks arising from accessing and sharing health data in the context of M&A operations.

DLA Piper ABBC

Domestic and multinational companies from an array of sectors, including tech, energy, life sciences, industrials and retail, frequently turn to DLA Piper ABBC for advice on GDPR compliance and data privacy-related commercial and litigation matters. The group is jointly led by João Costa Quinta, a commercial contracts and privacy law specialist, and Daniel Reis, recognised for his in-depth knowledge of data protection issues, including data breaches and GDPR compliance. Margarida Leitão Nogueira, who is especially active in the life sciences, consumer goods and tech sectors, is another name to note for privacy and cybersecurity mandates.

Praxisleiter:

João Costa Quinta; Daniel Reis


Weitere Kernanwälte:

Margarida Leitão Nogueira; Vanessa Patrocínio


Kernmandanten

EDP


NielsenIQ


Marktest


Multipessoal


PPG Dyrup


Metro Markets


Yamaha


Michael Page


iMM


Randstad


Ibersol


Highlight-Mandate


  • Advising EDPR on data protection matters worldwide.
  • Advising NielsonIQ on a regular basis.
  • Advising Ibersol on a regular basis.

PLMJ

A regular port of call for a number of large corporations, PLMJ‘s dedicated practice showcases demonstrable experience in cross-border compliance projects, audits, data breaches, litigation and the data protection aspects of high-value M&A. Practice head Pedro Lomba  advises across a range of regulated sectors, including media, electronic communications, health, AI and advertising. A litany of major corporates turn to Inês Dias Pinheiro for her expertise in challenging data privacy and data protection compliance matters, and Marta Salgado Areias is noted for her expertise in IP, consumer law and IT matters.

Praxisleiter:

Pedro Lomba


Weitere Kernanwälte:

Inês Dias Pinheiro, Marta Salgado Areias, Rita de Sousa Costa, Nádia da Costa Ribeiro


Referenzen

‘Nádia da Costa Ribeiro presents excellent technical knowledge in the area of ​​data protection and the specific topics that were addressed, in addition to an above-average dedication to the topics that are under her coordination.’

‘Nadia always seeks to find the best legal solutions to the questions raised in order to achieve the desired objectives, putting into practice your legal creativity whenever necessary.’

‘The team has a 360º view of the customer. Flexible and available for tailor-made solutions.’

Kernmandanten

TikTok


Microsoft


Danone


Apple


Empark Group


Securitas


Ford


Meta


Impresa


Herbalife


Glovo


Ascendi


CateringPor


StartCampus


United Investments Portugal


Tabaqueira (Philip Morris International)


H&M


Defined.ai


Flixbus


REN


Angola Cables


Highlight-Mandate


  • Assisting Defined.ai regularly in reviewing contracts with clients, licensing agreements and advising on data and IP matters.
  • Advised Microsoft’s Portuguese subsidiary on a legal dispute centred around exercising the right to be forgotten regarding Bing’s search engine.
  • Advising H&M on data protection, image rights, and associated contractual terms.

SRS Legal

Highlighted for its ‘technical expertise’ and ‘deep understanding of both Portuguese and European regulatory frameworks’, SRS Legal advises clients across the TMT, banking, insurance and life sciences sectors. The team excels in navigating complex matters, from ensuring GDPR compliance and drafting data-sharing agreements to managing high-stakes regulatory investigations. Practice head Luís Neto Galvão , who is lauded for his ‘deep knowledge’ and ‘remarkable ability to understand his clients’ business models.’ Giorgio Galli is frequently engaged by Italian clients active in the tech, media and telecoms sectors.

Praxisleiter:

Luís Neto Galvão


Weitere Kernanwälte:

Giorgio Galli; Filipe Oliveira Casqueiro


Referenzen

‘This law firm stands out for its exceptional quality of service and a collaborative culture that ensures personalised attention and innovative solutions in the field of data protection.’

‘The team’s technical expertise, particularly in compliance and privacy matters, combined with their deep understanding of both Portuguese and European regulatory frameworks, enables them to provide top-tier legal advice in this critical and strategic area for businesses.’

‘Luis Neto Galvão stands out for his solid experience in Data Protection and strategic approach, while Filipe Oliveira Casqueiro is noted for his technical precision and handling of regulatory matters. Both are highly recommended for their knowledge and client commitment.’

Kernmandanten

iBASIS


NAU – Highgate Group


Associação Mutualista Montepio Geral


GALP


Rubis


SAS Apostas Sociais, Jogos e Apostas Online (Group Misericórdia de Lisboa) Corticeira Amorim


Binary Subject (360 Imprimir)


BT Portugal


ANOVA


Goldenergy


Barrancos Municipality


Highlight-Mandate


  • Advised iBasis in relation to the privacy aspects of a cybersecurity service provided to telecoms operators, which identifies and eliminates fraudulent SMS messages.
  • Undertaking the implementation of GDPR in the Highgate Group, which includes 7 NAU hotels and two Hilton managed by Highgate, including a GAP Analysis and the implementation of data protection policies.
  • Submitted on behalf of Joaquim Chaves Saúde a complaint with the Data Protection Authority (DPA) against the Portuguese Competition Authority concerning several breaches of data protection obligations in a dawn raid undertaken on JCS.

Abreu Advogados

Fielding a ‘dedicated and committed team’ that is ‘technically competent and very up-to-date’, Abreu Advogados remains a strong choice for household name companies seeking assistance with cross-border data transfers, GDPR compliance, audits and privacy policies. The team is spearheaded by Ricardo Henriques, who stands out for his work on matters related to IP, IoT, personal data protection, media and advertising and telecoms. César Bessa Monteiro, jr  has vast experience in matters related to innovation, inventions, brands, trade secrets and unfair competition. José Maria Alves Pereira has vast experience on compliance projects regarding growing technologies, software development agreements and e-commerce platforms.

Praxisleiter:

Ricardo Henriques


Weitere Kernanwälte:

César Bessa Monteiro, jr, José Maria Alves Pereira


Referenzen

‘Cutting-edge firm, with a dedicated and committed team, technically competent and very up-to-date, always ahead of the main trends. Fair, honest, expected and controlled rates, which allow for good management of customer budgets. Effective, practical and clear support that meets real-world needs.’

‘Ricardo Henriques. They know the business reality, especially industry and innovation – they go straight to the customer’s needs, providing effective support, without waste or theoretical impasses.’

‘High level of expertise and great relationship with the team. Flexibility on invoicing too.’

Kernmandanten

Acciona


Bial


Casio


Coca-Cola


Colt Technology Services


CooperVision


Daimler


Enterprise


Essity


Federal Express (Fedex)


Fresenius SE & Co Kgaa


Genpact (Pnmsoft)


Globalvia


Google


Ikea Group


Lidl & Companhia


Mitsubishi Motors Corporation


Netflix


Porsche


Primark


Robert Bosch GmbH


Sap


Sitel


Thea Laboratoires


Veolia


Visa


Vodafone


Highlight-Mandate


  • Assisting Porsche in several projects related to their online business and connected car services, on a global level.
  • Advising Primark in respect of data protection project related with communication tools for employees.
  • Assisting LIDL on data protection and cybersecurity matters.

CCA Law Firm

Lauded for its ‘very practical approach’, the data protection team at CCA Law Firm assists clients with a range of matters, including GDPR compliance, privacy policies and data processing arrangements. The team is jointly led by Filipe Mayer, who is noted for his focus on gaming and online betting, as well as in the area of esports; Martim Bouza Serrano, who draws praise for ‘clearly explaining complex issues’; and Rita Serrano, who has a proven track record of advising clients on compliance with complex regulatory frameworks such as GDPR, and other global data protection laws.

Praxisleiter:

Filipe Mayer; Martim Bouza Serrano; Rita Serrano


Referenzen

The team is dynamic, knowledgeable and available.’ 

‘Martim Bouza Serrano is a very experienced lawyer and capable of clearly explaining complex issues.’

‘The services are provided with excellent quality, both in content and form, anticipating issues that may be relevant. What makes CCA stand out is its pro-client and very practical approach to delivering the work requested, which is essential for a large and very dynamic company, which raises dozens of legal questions every day.’

Kernmandanten

Google


Vodafone


IBM


Sephora


P&G


Havas Group


Fullsix Portugal


Medialivre, S.A.


C&A


Colep Packaging


JTI – Tabaco


Sendit


Special Variable


Jimpisoft


Europcar


Highlight-Mandate


CMS

With a client roster that includes major domestic and multinational companies, CMS is highly experienced in cross-border compliance, data transfers, GDPR-related matters, and privacy policies. The practice is jointly steered by José Luís Arnaut , who has extensive experience providing strategic advice to public and private companies, and João Leitão Figueiredo, who is well versed in contentious, transactional and day-to-day data protection and privacy advice.

Praxisleiter:

José Luís Arnaut; João Leitão Figueiredo


Weitere Kernanwälte:

Ricardo Pintão, Sara Rocha


Referenzen

‘Agility, coherence and security.’

‘The team is strong in data protection. They have sophisticated clients and provide reliable, quick solutions.’

‘Ricardo Pintão is specially qualified in data protection.’

Kernmandanten

CEPSA


Repsol


Mercedes-Benz Financial Services Portugal


Galp Group


EDP Group


Delta Cafés (Nabeiro Group)


Bensaude Group


Essilor Portugal


DaVita Group


NAV Portugal


Angelini Group


Fromageries Bel (Bel Group)


IKEA Industries


Abanca Corporacion Bancaria, Sucursal em Portugal


VINCI Energies


Solera Group (Audatex)


SRT Group (Stuart)


Keller Williams (Portugal)


Highlight-Mandate


  • Advising CEPSA on an extensive and demanding compliance and technological development project intended to modernise the business structure as well as to safeguard information systems and personal data.
  • Advising All Win on assessing the licensing terms of the Command Platform in the Portuguese market in the context of the various layers of Franchising terms and taking into consideration the internal development of the Command Platform by KW RI.

CS’Associados

CS’Associados fields a team of ‘ highly qualified’ professionals, noted for its ability to assist clients across a range of data privacy matters. Spearheading the team is Jorge Silva Martins , who stands out for his ‘pragmatic vision’ and ‘ability to identify essential issues.’

Praxisleiter:

Jorge Silva Martins


Weitere Kernanwälte:

João Carminho, Inês Coré


Referenzen

‘The CS’Associados team is highly qualified to advise in the areas of privacy and personal data protection, providing rigorous legal advice.’

‘Jorge Silva Martins is the partner responsible for the area and an expert on the subject. Results-oriented and capable of providing tailored solutions. Dedicated and assertive, he is always available to answer any questions.

‘A highly qualified, creative and innovative work team, which, more than a mere legal opinion, knows the client from end to end, seeking the best alternative for company and sector in question. They are very available and business-oriented professionals.’

Highlight-Mandate


Cuatrecasas

Renowned for its ‘global and competent vision’, Cuatrecasas specialises in privacy matters related to sensitive healthcare data and provides strategic advice to clients in the telecoms, hardware, banking, technology, and retail industries. Practice head Joana Mota Agostinho earns praise for her excellent technical and personal skills’, standing out for her experience advising a broad range of organisations on data privacy matters.

Praxisleiter:

Joana Mota Agostinho


Weitere Kernanwälte:

Lavínia Marques; Catarina Castanheira Lopes


Referenzen

‘Provides the best customer service, whether technically or economically.’

‘Specialisation and response readiness.’

‘Cuatrecasas has been providing an excellent advisory service. The team has a global and competent vision in relation to the work to be developed, promotes benchmarking and has skills in the regulatory scope that are crucial for the compliance of the implemented process.’

Kernmandanten

Hikma


Correos Express


Novo Nordisk


CUF


BMW Portugal


Volkswagen Autoeuropa


Galp


Roche


IPO Coimbra


Huawei


Outsystems


Globo


Grupo Porto Editora


Auto-Estradas do Atlântico


DHL


Grupo Sogrape


Volkswagen Autoeuropa


ONI


Nowo


Farfetch


TAP


Infraestruturas de Portugal


Águas de Portugal


Fundação Champalimaud


Highlight-Mandate


  • Advised TAP on data protection and regulatory compliance.
  • Advised Huawei on personal data protection, including compliance with privacy laws and regulations.
  • Advised Galp Energia on data protection matters.

Garrigues Portugal

Standing out for its ‘pro-client and very practical approach’, the team at Garrigues Portugal is highly experienced in handling a range of data protection matters, including data processing agreements, M&A transactions, privacy policy issues, data breaches, and proceedings before the Portuguese Data Protection Authority (CNPD). Practice head Manuel Liberal Jerónimo is noted for his experience in international commercial contracts, including distribution contracts, notably linked to the TMT sector.

Praxisleiter:

Manuel Liberal Jerónimo


Weitere Kernanwälte:

Luísa Cyrne, Matilde Bettencourt, Rute Silva Gomes


Referenzen

‘Quality, speed and availability.’

‘The services are provided with excellent quality, both in content and form, anticipating issues that may be relevant. What makes Garrigues stand out is its pro-client and very practical approach to delivering the work requested, which is essential for a large and very dynamic company, which raises dozens of legal questions every day.’

‘The expertise is notable, which gives a lot of confidence in the legal analysis received.’ 

Kernmandanten

Samsung


L’Oreal


Volvo


Endesa


Honda Motor Europe


Iberdrola


Jaguar


Inditex Group


JLL group


Angelini


Robert Bosch


CBRE


Polestar


Apax/Gamalife


Henderson Park


Evox Technologies


Neuraspace


Idealista


Highlight-Mandate


  • Advising the Portuguese affiliate of a manufacturer of consumer electronics by revenue in data protection matters.
  • Preparing the group’s VDD for Portugal on several data protection matters and carrying out certain compliance procedures in connection therewith, all within the scope of the purchase of a majority stake in Idealista by the private equity firm, CINVEN.
  • Assisting the English private equity real estate manager in the implementation of an APP to manage the Lagoas Park resort (including advice from a data protection perspective.

Sérvulo & Associados

The ‘excellent’ team at Sérvulo & Associados is highly regarded for its expertise in data protection, with particular strength in GDPR compliance projects, audits, and drafting data processing and transfer agreements. The team is led by a skilled trio of experts: Ana Rita Painho, who regularly assists multinational companies on data privacy issues; José Lobo Moutinho, who is recommended for his contentious experience; and João Carmona Dias, who remains active across the IT, healthcare, electronics, distribution and energy sectors.

Praxisleiter:

Ana Rita Paínho; José Lobo Moutinho; João Carmona Dias


Weitere Kernanwälte:

Ana Mira Cordeiro, Inês de Sá


Referenzen

‘Approach oriented towards the final result and an interpretation aligned and framed with best practices, as well as integration with other business areas.’

‘João Carmona Dias for his approach focused on concrete and well-prepared aspects.’

‘The team demonstrated high knowledge of GDPR matters, which were very relevant to the work in progress.’

Kernmandanten

EDP, S.A.


Grünenthal, S.A.


Grünenthal Corporate Hub, Unipessoal, Lda.


Senseidata, S.A.


Lusa – Agência de Notícias


Teva Group


Banco BIC Português, S.A.


LG Electronics Portugal


Hitachi Portugal


Signify Portugal


Ferreo Ibérica


SPMS – Serviços Partilhados do Ministério da Saúde E.P.E.


Abbott Laboratórios, Lda.


Highlight-Mandate


  • Assisting Senseidata on data privacy impact assessments, drafting of data processing agreements for clients and policies and assessment on possibility of collection of personal data.
  • Providing software and privacy /data protection matters advice to EDP.
  • Advising The Grünenthal Corporate Hub  in GDPR compliance, including auditing procedures, training, and creation/update of existing procedures.