The note outlines Portugal’s framework for international data transfers under the GDPR and Law No. 58/2019, alongside sectoral statutes on telecoms, AML/CFT, private security, and cybersecurity. It catalogues CNPD guidance and enforcement (e.g., intragroup transfers, Census data suspensions, Lisbon/Setúbal cases) and flags the Commission’s 2023 adequacy for the EU-US Data Privacy Framework. It summarizes key EDPB/EDPS materials on supplementary measures, public-authority transfers, SCCs/BCRs referentials, and certification as a transfer tool. On Schrems II, it notes Privacy Shield’s invalidation and SCCs’ continued use subject to case-by-case assessments and safeguards.
See complete chapter at: Data Transfers Guidance Note, January 2024.
January 1, 2024
Don’t miss our content
Subscribe