Portuguese Legal Order
The regimes that frame the leadership of compliance.
The Chief Compliance Officer answers, before the board, for the organisation's response to these regimes. The main compliance and accountability regimes the Chief Compliance Officer must answer for, in Portugal.
| Area | Instrument | Authority |
|---|---|---|
| Data Protection | GDPR and Law 58/2019 | CNPD |
| Whistleblowing | Law 93/2021 (transposing Directive (EU) 2019/1937) | — |
| Anti-Corruption | General Regime, Decree-Law 109-E/2021 | MENAC |
| Anti-Money Laundering | Law 83/2017 | Banco de Portugal · CMVM |
| Cybersecurity | NIS2 — Decree-Law 125/2025 (MyCiber) | CNCS |
| Governance and Accountability | Three lines of defence, internal control and board reporting | — |