Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Portugal: CNPD publishes 2023 activity report

On September 17, 2024, the Portuguese data protection authority (CNPD) published its 2023 activity report.

The report highlights the CNPD's activities, including in the following areas:

  • awareness: The CNPD reinforced its awareness activity by publishing guidelines aimed at organizations that process personal data, both as controllers and processors;
  • cases: In 2023, the CNPD dealt with 2,656 cases, almost the same number of cases as in 2022. Out of the total, 107 cases were consultations,1,818 cases were investigations, and 47 cases dealt with data subject's rights, mainly the right to access and right to erasure, which represented a decrease from the previous year;
  • data breaches: The CNPD dealt with 409 cases of data breaches, most of which were related to public entities. The most common cause of the data breaches was human error, followed by ransomware;
  • inspections: During 2023, the CNPD carried out 144 inspections; and
  • decisions: The CNPD issued a total of 1,684 decisions, including decisions on proposed legislation and regulations. The CNPD also issued 90 sanctions totaling €559,950, as well as seven corrective measures and 253 warnings.

You can read the report, only available in Portuguese, here.