General Data Protection Regulation (GDPR)
The General Data Protection Regulation, Regulation (EU) 2016/679, of 27 April 2016, of the European Parliament and the Council, regulates the protection of natural persons concerning the processing of personal data and the free movement of such data and dictates the rules that shall apply to the processing of personal data.
The GDPR applies to data controllers established on European Union territory, provided that the data processing takes place in the context of the activities of that establishment.
The normative provisions of the new General Data Protection Regulation, Regulation (EU) 2016/679 of 27 April 2016, published in the Official Journal of the European Union on 4 May 2016, entered into force in 2016 but have been applicable since 25 May 2018.
You can consult ESEnfC's Privacy Policy and processing of personal data at:
https://www.esenfc.pt/pt/page/100004162
CyberSecurity
Decree-Law n.º 65/2021, of July 30, regulates the Cyberspace Security Legal Regime and defines the obligations regarding cybersecurity certification in implementation of Regulation (EU) 2019/881 of the European Parliament, of April 17, 2019.
