Artificial Intelligence · Portugal
AI regulation in Portugal: the EU AI Act (2026)
Portugal shaded by its artificial intelligence status
AI in Portugal: comprehensive law, anchored by EU Artificial Intelligence Act (Regulation (EU) 2024/1689), directly applicable in Portugal, with ANACOM (Autoridade Nacional de Comunicações) designated as the national market surveillance authority and single point of contact; complemented by the AI Portugal 2030 national strategy..
As an EU member state, Portugal is governed by the EU AI Act, a comprehensive, risk-based horizontal AI law that is directly applicable and phasing in (prohibitions and AI-literacy duties since February 2025; GPAI rules from August 2025; full high-risk obligations by August 2026). Portugal has not enacted a standalone national AI statute; instead it focuses on national implementation, designating ANACOM in September 2025 as the lead market surveillance authority coordinating sectoral regulators. Portugal also maintains a non-binding national strategy, AI Portugal 2030, under the INCoDe.2030 initiative.
The EU AI Act in Portugal
In Portugal, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in Portugal; national market-surveillance authorities handle enforcement.
The EU AI Act in Portugal: FAQ
Yes. As an EU member, Portugal is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Key points
The EU AI Act is a directly-applicable EU regulation establishing a risk-based framework (prohibited, high-risk, limited-risk, minimal-risk) that governs AI in Portugal without needing transposition; phased application runs from February 2025 through full high-risk obligations by 2 August 2026.
By a September 2025 Council of Ministers Resolution, Portugal designated ANACOM (Autoridade Nacional de Comunicações) as the national market surveillance authority and single point of contact for the AI Act.
ANACOM coordinates a network of sectoral competent authorities (e.g. ERC for media, GNS/National Security Office, financial inspectorate IGF, Judicial Police, and education/justice inspectorates) that supervise AI within their respective domains.
The Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority, oversees AI processing of personal data under GDPR and is among the authorities protecting fundamental rights under Article 77 of the AI Act.
Portugal's non-binding national AI strategy, AI Portugal 2030, published in 2019 under the INCoDe.2030 initiative, sets priorities for skills, research, innovation ecosystems and public-sector adoption; an updated Agenda Nacional de IA was advanced in 2025 around innovation, talent and infrastructure.
Portugal has not enacted a dedicated domestic AI statute; its regulatory posture is to implement and enforce the directly-applicable EU AI Act and coordinate national supervision rather than legislate separately.
Timeline - major decisions & events
Resolution of the Council of Ministers 2/2026 formally approves the Agenda Nacional de Inteligência Artificial (ANIA), a 32-initiative framework across four pillars, infrastructure & data, innovation & adoption, talent & skills, and responsibility & ethics, targeting a 10-15-fold increase in national compute capacity by 2030 and an estimated €18-22 billion GDP uplift. This is Portugal's primary domestic AI policy instrument, sitting alongside the directly applicable EU AI Act.
Diário da República ↗The Portuguese government named ANACOM (the telecoms regulator) as the national market-surveillance authority and single point of contact under the EU AI Act, announced at ANACOM's annual AI regulation conference in Lisbon, six weeks after Portugal had missed the EU's 2 August 2025 deadline. ANACOM coordinates enforcement with 14 sectoral authorities including the CNPD, Banco de Portugal, and CMVM.
ANACOM ↗Portugal's data-protection authority issued Deliberação 2024/137 ordering the Worldcoin Foundation to cease iris-scan ('Orb') collection nationwide for 90 days, citing collection of minors' biometric data, denial of erasure and consent-revocation rights, and inadequate data-subject information. The investigation had been opened in August 2023 after 300,000 Portuguese had already registered; this was Portugal's first major enforcement action directly targeting an AI-powered biometric system.
CNPD ↗Portugal enacted the Carta Portuguesa de Direitos Humanos na Era Digital, among the first laws globally to codify AI-specific rights: algorithmic decisions with significant impact must be communicated, auditable, and subject to appeal; AI development must respect transparency, explicability, security, and accountability; and the principles of beneficence, non-maleficence, autonomy, and justice govern robotic and autonomous systems. Principle-based but legally binding on public bodies, it underpins subsequent AI governance.
European Commission / Better Internet for Kids ↗The Portuguese government published AI Portugal 2030 under the INCoDe.2030 umbrella, making Portugal one of the first EU member states to adopt a national AI strategy. Its seven pillars covered skills, public-sector AI adoption, research, Portugal as a 'living lab,' and niche AI export markets, and it aligned explicitly with the EU's Coordinated Plan on AI, setting the foundational policy architecture for all subsequent domestic AI initiatives.
INCoDe.2030 / Portuguese Government ↗Portugal launched the Iniciativa Nacional Competências Digitais e.2030 (INCoDe.2030), an inter-ministerial programme spanning inclusion, education, qualification, specialisation, and research. It became the institutional home for the 2019 AI Portugal 2030 strategy and remains the principal cross-government coordination structure for AI and digital policy, the foundational enabling institution of Portugal's AI governance.
INCoDe.2030 / Portuguese Government ↗Portugal - other topics
Artificial Intelligence in other countries
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Methodology & how to cite · Explore the full world map →