Electronic Transactions Law, data protection contraventions and enforcement

Lei n.º 3/2017, de 9 de Janeiro, arts. 67(m), 68(c), 69-70 (contravenções e fiscalização)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force.

An enforcement supervision rule binding public and private bodies.

As of 19 September 2026.

What it requires

Expect violating the data protection duties of this chapter to be treated as a punishable contravention.
Expect a fine of 30 to 90 times the public-service minimum wage for that contravention, unless a more severe penalty applies under separate criminal legislation.
Expect the National Institute of Information and Communication Technologies (INTIC), the law's designated regulatory entity, to process and decide the contravention proceeding.
Expect a sanction for a contravention to be appealable directly to the judicial court of the relevant jurisdiction, or by a prior complaint to the minister overseeing information technology.

What it reaches

Obligation class

Governance

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 66 states that the contraventions in this chapter are punishable under the following articles, without prejudice to a more severe penalty under separate criminal legislation. Article 67(m) makes violating the data-protection duty, meaning the data processor's obligations under this Law, a punishable contravention alongside a list of computer-misuse contraventions.

Article 68(c) sets the fine for that contravention, along with five other listed contraventions, at 30 to 90 times the public-service minimum wage, unless a more severe penalty applies under separate criminal legislation.

Article 69(1) gives the entidade reguladora, identified by article 11(2) as the National Institute of Information and Communication Technologies (INTIC), the power to process and decide the contravention proceeding, and article 69(2) leaves the procedural regime for contraventions to be regulated by the Council of Ministers.

Article 70(1) lets a sanction from a contravention be appealed directly to the judicial court of the relevant jurisdiction, or challenged first by a complaint to the minister overseeing information technology, and article 70(2) sends an appeal from any other decision to the Administrative Court.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

Text of Lei n.º 3/2017, de 9 de Janeiro (Lei das Transacções Electrónicas), Boletim da República I Série, mirrored by DataGuidance

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app