CNPD
Short definition
The CNPD (Comissão Nacional de Proteção de Dados) is the independent administrative authority that supervises and enforces compliance with the GDPR and national data protection law in Portugal.
In plain language
It handles complaints from the public, carries out inspections, imposes fines and publishes guidance and decisions. It is also the body to which personal data breaches are notified and which must be consulted beforehand when an impact assessment shows a high risk that cannot be reduced. Its role and operation are set out in Law 58/2019, which implements the GDPR in Portugal.