Noted for its ‘great knowledge’ and ‘high quality of advice’, the data privacy and protection team at Morais Leitão, Galvão Teles, Soares da Silva & Associados acts for a diverse range clients in all stages of data protection work, from compliance programmes to investigations and disputes. Adopting a cross-practice approach, the team boasts specialists from a wide range of fields including TMT, labour, criminal, corporate and insurance law. Practice head Tiago Félix da Costa, praised for his ‘professionalism’, seamlessly integrates his data protection practice with a litigation focus, showcasing an impressive track record in handling some of Portugal’s most significant date protection and cybersecurity cases. Other practitioners to note include Helena Tapp Barroso, who is often instructed by clients across the technology, banking, insurance, pharmaceuticals and automotive industries in relation to contractual matters and compliance issues, and sssociate Maria da Assunção da Cunha Reis.

Recognised as a ‘leading law firm’, VdA‘s privacy and data protection team seamlessly integrates into the larger information, communication, and technology group. Praised for its ability to ‘provide truly remarkable solutions’, the team comprises specialised practitioners in specific industries, who adeptly support clients across sectors such as retail, healthcare, energy, insurance, transport, banking and gambling. The practice is steered by Magda Cocco, who has in-depth knowledge and experience in innovative technological projects in the electronic communications industry, is a key name in the market for data transfers, data breaches and compliance issues. Focused on data protection compliance programmes in Portugal and Africa, Inês Antas De Barros is noted for her work across the IT, insurance, banking, transport, pharmaceuticals, distribution and retail sectors. Managing associate Maria De Lurdes Gonçalves is also part of the core team focused on data protection and cybersecurity mandates.

Singled out for its ‘pragmatism and knowledge’, the team at DLA Piper ABBC is regularly instructed by major multinationals in the full spectrum of data privacy, protection, and cybersecurity issues, notably in the implementation of compliance programmes and GDPR work. The team is jointly led by corporate and M&A specialist João Costa Quinta and Daniel Reis, who noted for his wealth of experience in tech-related matters and cybersecurity incidents. Highly regarded by clients for her 'in-depth knowledge of personal data', recently promoted partner Margarida Leitão Nogueira focuses on the intersection of IP and technology, often advising on privacy, data protection, and cybersecurity issues.

Praised for its ‘client-oriented approach’, the privacy and data protection team at PLMJ is a key port of call for large corporations seeking assistance with cross-border compliance projects, audits, data breaches, litigation and the data protection aspects of high-value M&A. Spearheading the team is Pedro Lomba, who advises clients across a wide range of regulated sectors, such as media, mobility, IT, online platforms, healthcare and AI. Associate Inês de Castro Ruivo handles a variety of data protection and data privacy compliance matters for major banking, TMT and energy players. Other names to note at the associate level include Marta Salgado Areias, who brings together expertise in IP, data protection and consumer law, and Rita de Sousa Costa, who handles complex audits and litigation cases.

SRS Legal houses a data privacy and protection team that is praised for its ‘pragmatism’ and ‘great knowledge’. Clients from across the TMT, banking, insurance and life sciences sectors regularly turn to the department for advice on a range of matters, including GDPR compliance issues, data sharing agreements and regulatory investigations. At the helm sits Luís Neto Galvão, a reference in the market for TMT, healthcare, and financial sector clients; he brings to the table more than two decades' experience in this space and has been described as a ‘deep expert’ in all matters pertaining to data protection. Managing associate Milène Zorrón is responsible for the compliance department and the German and Brazilian desks.

Praised for its ‘high technical knowledge’, the data privacy and protection team at Abreu Advogados is a popular destination for household name companies seeking assistance with cross-border data transfers, GDPR compliance, audits and privacy policies. Under the leadership of Ricardo Henriques, the practice excels at assisting clients across the TMT, insurance, healthcare, life sciences and retail sectors. Henriques is noted for his focus on technology, advising on matters such as software licensing, compliance projects regarding emerging technologies and issues related to e-commerce, including data protection-related matters. Senior associate José Maria Alves Pereira has extensive experience in mandates concerning GDPR compliance.

The team at CCA Law Firm, lauded for its ‘in-depth knowledge’, stands out for its experience advising companies in the TMT sector on GDPR compliance, privacy policies and data processing arrangements. Lawyers earn further praise for their ability to act for clients operating in the financial, pharmaceuticals, banking, and retail industries. Filipe Mayer and Martim Bouza Serrano, the latter of whom focuses on tech, privacy, IP and other TMT-related matters, jointly head up the practice. Eduardo Magrani stands out for his strong performance in data protection, IP, AI and cybersecurity mandates.

Counting large domestic and multinational companies among its key client roster, CMS is well versed in cross-border compliance projects, data transfers, GDPR-related work, and privacy policy matters. The practice is spearheaded by IP specialists José Luís Arnaut and João Leitão Figueiredo. Arnaut often acts for public and private companies in the implementation of compliance programmes, while Figueiredo is noted for his expertise in data breaches, data transfers and issues pertaining to online tracking. Associate Sara Rocha is another key individual to note for mandates involving the protection of personal data, including compliance projects and privacy policies.

The ‘very cohesive’ team at Cuatrecasas excels in privacy matters relating to sensitive data in the healthcare sector. Additionally, the practice is well positioned to advise clients across the telecoms, hardware and electronics, banking, technology and retail sectors. The team is jointly led by Sónia Queiróz Vaz, noted for her focus on privacy and data protection issues, including Big Data, e-commerce and long-distance agreements, and Joana Mota Agostinho, who is a key port of call for clients hailing from the TMT and other highly regulated industries.

Praised for its ‘collaborative stance’, the team at Eversheds Sutherland is well placed to assist clients engaged in the energy, telecoms, healthcare and manufacturing sectors on a broad range of data privacy matters, including GDPR compliance and data processing issues. Practice head Margarida Roda Santos handles the full scope of IP matters, and has extensive experience on IT and data protection issues in Portugal, Angola and Mozambique. Key support is offered by Pedro Sampaio Neves and José Luís Monteiro , both of whom advise on the implementation of GDPR programmes.

The ‘reliable and client-centric’ team at Garrigues Portugal regularly handles data processing agreements, M&A, privacy policy issues, data breaches and proceedings before the Portuguese Data Protection Authority (CNPD). The practice is jointly steered by Tomás Pessanha, and Alejandro Payá. Senior associate Rute Silva Gomes works with domestic and multinational companies on data protection and commercial mandates. Isabel Bairrão left the firm in January 2024.

The ‘multidisciplinary team’ at Sérvulo & Associados earns praise for its ‘professionalism’ and ‘technical knowledge.’ Well positioned to advise clients on a range of data and protection matters, the group excels in GDPR compliance projects, audits, and data processing and transfer agreements. The team is under the joint leadership of a capable trio: Ana Rita Painho, who is singled out for her expertise in the gamut of data protection matters; dispute resolution specialist José Lobo Moutinho; and João Carmona Dias , who acts for companies from an array of sectors, including banking and payment services, energy, insurance, healthcare, IT, electronics and distribution, and brings together expertise in data protection, commercial and corporate law.

The ‘excellent’ data privacy and protection team at TELLES advises clients from a myriad of sectors, including banking, retail, technology and automotive, on a range of matters. The practice is steered by Pedro Vidigal Monteiro, who has combined expertise in IP, tech-related matters and data privacy issues. Ana Ferreira Neves, who possesses extensive experience in e-commerce and consumer law, and Maria Abreu Ferreira who regularly carries out data protection compliance assessments, are other names to note in the team.