Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
23 September 2024
Portugal: CNPD publishes 2023 activity report
On September 17, 2024, the Portuguese data protection authority (CNPD) published its 2023 activity report.
The report highlights the CNPD's activities, including in the following areas:
- awareness: The CNPD reinforced its awareness activity by publishing guidelines aimed at organizations that process personal data, both as controllers and processors;
- cases: In 2023, the CNPD dealt with 2,656 cases, almost the same number of cases as in 2022. Out of the total, 107 cases were consultations,1,818 cases were investigations, and 47 cases dealt with data subject's rights, mainly the right to access and right to erasure, which represented a decrease from the previous year;
- data breaches: The CNPD dealt with 409 cases of data breaches, most of which were related to public entities. The most common cause of the data breaches was human error, followed by ransomware;
- inspections: During 2023, the CNPD carried out 144 inspections; and
- decisions: The CNPD issued a total of 1,684 decisions, including decisions on proposed legislation and regulations. The CNPD also issued 90 sanctions totaling €559,950, as well as seven corrective measures and 253 warnings.
You can read the report, only available in Portuguese, here.