Privacy Map

Portugal. ePrivacy / marketing. Act

Lei 41/2004Law No. 41/2004 on the processing of personal data and protection of privacy in the electronic communications sector

In force
Partly verifiedLow confidence. Not verified this session.

§1Summary

Synopsis

Law 41/2004 implements the ePrivacy Directive in Portugal, requiring consent for cookies and opt-in for unsolicited electronic marketing to individuals.

Key themes
  • cookies/terminal equipment consent
  • direct marketing
  • soft opt-in
  • traffic and location data
Unique features

CNPD maintains national guidance; marketing to legal persons is opt-out via a registry.

SaaS relevance

Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.

§2Obligations

Extraterritorial
Yes
Breach notification
Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
DPO
No
Cross-border transfers
None
Maximum penalty
Fines under Law 41/2004; GDPR fines

§3Dates

Key dates
  • Adopted
  • In force
  • Amended by Law 46/2012 (cookies Art 5; marketing Art 13-A)

§4Text and authority

Text
Authority
Comissão Nacional de Proteção de Dados (CNPD); ANACOM for some telecom provisions

§5Where it applies

Domestic law of
Portugal

§6Sources and verification

Sources consulted
Verification

Low confidence.

Partly verifiedLow confidence. Not verified this session.