language: en · source language: pt · status: in-force · last checked: 2026-09-06

Portugal — Lei n.º 41/2004 (ePrivacy transposition)

Portugal's transposition of the ePrivacy Directive (2002/58/CE), substantially rewritten by Lei n.º 46/2012 (the 2009/136/CE "cookie consent" amendments — the TODO's working cite pointed at this amending act; the instrument in force is Lei 41/2004 consolidated).

Statute text is Portuguese (the authentic language); this README is curation.

Applicability to EdTech

• Cookie rule (artigo 5.º): storage of or access to information on a subscriber/user's terminal equipment requires prior consent on clear and complete information; exceptions only for transmission of a communication and for storage/access strictly necessary for an information-society service the user expressly requested — the same two-exception structure as the directive, so a school platform's strictly functional cookies are fine, analytics/marketing are not without consent.
• Direct marketing (artigo 13.º-A): prior express consent (opt-in) for automated/e-mail/SMS marketing to natural persons; the soft opt-in for own similar products requires free and easy refusal at collection and per message (n.º 3); legal persons are opt-out via the 13.º-B lists.
• Scope and definitions in artigo 1.º.

Contents

Enforcement

CNPD and ANACOM share competences (artigo 13.º-D, not extracted); contraordenações under artigos 14.º–15.º.

Related

• EU ePrivacy Directive — the transposed directive
• PT Lei 58/2019 — GDPR execution
• PL PKE art. 398–400 — the Polish sibling

Sources

• PGDL — Lei 41/2004 consolidada

Meta

Statute text in COOKIES-E-MARKETING.md is reproduced verbatim in Portuguese from the PGDL consolidated database by tools/pgdlisboa/build_pt.py; verify re-fetches and fails when an extracted article's amendment trail changes (currently: 46/2012 across the extracted articles).