Portuguese Legal Order
The main compliance and accountability regimes that, in Portugal, underpin the need for training.
Compliance training responds to concrete obligations of the Portuguese legal order, articulated with European Union law.
| Area | Instrument | Authority |
|---|---|---|
| Data Protection | GDPR and Law 58/2019 | CNPD |
| Whistleblowing | Law 93/2021 (transposing Directive (EU) 2019/1937); mandatory from 50 employees | — |
| Anti-Corruption | General Regime, Decree-Law 109-E/2021, with a Risk Prevention Plan | MENAC |
| Anti-Money Laundering | Law 83/2017 and the duties of obliged entities | Banco de Portugal · CMVM |
| Cybersecurity | NIS2 — Decree-Law 125/2025 (MyCiber platform) | CNCS |
| Artificial Intelligence | Regulation (EU) 2024/1689 (AI Act) | — |
| Governance and Accountability | Three-lines-of-defence model, internal control and accountability | — |
More information
The information is indicative; regimes evolve and should be confirmed with the competent authorities. Regulatory map at regimesjuridicos.pt.