Practice Areas

Legal diligence to protect data and ensure GDPR compliance.

This is a practice area structured within Archer & Associados, covering all fields of personal data protection. Personal data is information relating to a living natural person who is identified or identifiable. Personal data also includes any set of information that could lead to the identification of a specific person. With the publication and entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 — the new General Data Protection Regulation (GDPR) of the European Union (EU) — legal rules were established regarding the processing, by an individual, a company, or an organisation, of personal data relating to persons within the EU. The GDPR protects personal data regardless of the technology used to process it, and applies to both automated and manual processing, provided the data is organised according to pre-defined criteria. The way in which the data is stored — in a computer system, through video surveillance, or on paper — is irrelevant: in all such cases, personal data is subject to the protection requirements set out in the GDPR. Law No. 58/2019, of 8 August, ensures the implementation of the GDPR within the national legal order, with regard to the processing of personal data and its free movement.

Archer & Associados lawyers in this area, supported by consultants specialised in information management and processing, are equipped to advise any company or institution on compliance with personal data protection rules, to serve as Data Protection Officers, and to defend such companies and institutions in any administrative offence proceedings brought against them by the National Data Protection Commission, both at the administrative and judicial stages.