Portugal cybercrime law exemption for security research
Public Sector Action
Summary
Hide ▲
Show ▼
Portugal updated its cybercrime law to exempt cybersecurity researchers and ethical hackers from prosecution, creating a legal safe harbor for responsible vulnerability work. The change was published in the Portuguese Official Journal (Diário da República) on December 4. The exemption applies only when research helps identify vulnerabilities or contributes to cybersecurity, and it bars methods such as DoS, phishing, data theft, and data alteration. It also requires reporting findings to the system or product owner and the data protection regulator, with deletion of the data within 10 days after a vulnerability is fixed.
Related Happenings
Portugal cybercrime law safe harbor for security research
Public Sector Action
First: 07.12.2025 17:09
Last: 07.12.2025 17:09
Sources 1
About this happening:
**Portugal** modified its **cybercrime law** to create a legal safe harbor for **good-faith security research**, reducing criminal risk for narrowly scoped vulnerability testing....
Portugal cybercrime law safe harbor for security research
Public Sector ActionAbout this happening: **Portugal** modified its **cybercrime law** to create a legal safe harbor for **good-faith security research**, reducing criminal risk for narrowly scoped vulnerability testing....
Timeline
-
08.12.2025 13:43 2 articles · 5mo ago
Portugal creates legal exception for cybersecurity research
Legal Policy Action UpdatePortugal amended its cybercrime law to create a public-interest exception for cybersecurity researchers and ethical hackers, exempting conduct aimed at identifying vulnerabilities or contributing to cybersecurity when it is proportionate, does not seek economic advantage, avoids DoS, social engineering, phishing, data theft, data alteration, disruption, interruption, deletion, deterioration, or unauthorized copying of computer data, and includes reporting findings to the system or product owner and the data protection regulator.
Show sources
- Portugal Revises Cybercrime Law to Protect Security Researchers — www.infosecurity-magazine.com — 08.12.2025 13:43
- Portugal Revises Cybercrime Law to Protect Security Researchers — www.infosecurity-magazine.com — 08.12.2025 13:43