Gómez-Acebo & Pombo's data privacy team was significantly strengthened by the arrival of the reputable Daniel Reis from DLA Piper ABBC in February 2026. He brings a wealth of experience in sophisticated data protection, privacy and cybersecurity matters.

Combining ‘in-depth legal knowledge’ with a ‘pragmatic, solution-oriented approach’, Morais Leitão, Galvão Teles, Soares da Silva & Associados advises across the full lifecycle of privacy and data protection matters with ‘excellence’, from compliance and regulatory advisory to administrative and judicial litigation. The ‘highly specialised’ Tiago Félix da Costa leads the practice, combining expertise in data protection and litigation to advise major clients. Helena Tapp Barroso is valued for her ‘deep knowledge’ of data protection, having served as external Data Protection Officer (DPO), while also advising on day-to-day matters, complex privacy projects, international data transfers and AI usage. Maria da Assunção da Cunha Reis is recognised for her ‘technical capacity’ in both data protection and litigation.

With wide-ranging capabilities, PLMJ's data privacy and protection team advises on data transfers, cyber and data breach incidents, NIS2 directive compliance, litigation and interactions with regulators. Practice head Pedro Lomba draws on his ‘rich experience’ advising private and public entities in regulated sectors on data privacy matters, covering advisory, judicial and regulatory work. Inês Dias Pinheiro, with former DPO experience, is particularly active in the banking, tech, AI and mobility sectors. Marta Salgado Areias is trusted for compliance, contract negotiation and data breaches management, while Rita de Sousa Costa specialises in complex audits and litigation.

VdA delivers ‘integrated, complete’ solutions across the privacy and data protection spectrum, with extensive expertise in data governance, data economy and cybersecurity. The team demonstrates ‘technical excellence’ in contentious and non-contentious matters, supporting clients across sectors in digital transformation projects, compliance programmes and GDPR implementation. The practice is led by the vastly experienced Magda Cocco, who advises on governance, data-related strategies, GDPR compliance programmes and cybersecurity threats. Inês Antas De Barros is recognised for her ‘profound knowledge’ of data protection, cybersecurity and data economy, while Maria de Lurdes Gonçalves brings her ‘advanced knowledge and a strong practical sense’ to data protection in the healthcare, banking, finance, energy and infrastructure sectors.

With ‘demonstrated expertise’ in data protection, privacy and cybersecurity, Cuatrecasas offers ‘pragmatic and effective’ solutions to leading Portuguese and international clients on digital transformation projects, data protection audits, data transfers and regulatory compliance. Joana Mota Agostinho leads the ‘robust’ team, bringing wide experience in data privacy in regulated sectors, such as telecoms, technology, pharmaceuticals and healthcare. Lavínia Pinto Marques and Catarina Castanheira Lopes are other key practitioners in the group, who regularly assist with compliance programme implementation, DPO services and contentious matters.

Domestic and multinational clients rely on DLA Piper ABBC for its global reach and local expertise in multijurisdictional data protection challenges, including litigation, GDPR compliance and data governance. João Costa Quinta oversees the practice. Margarida Leitão Nogueira stands out for her GDPR expertise, advising clients in life sciences, consumer goods, retail and technology. Vanessa Patrocínio is acknowledged for her ‘thorough’ knowledge of the regulatory environment, with recent work on projects involving emerging technologies, eHealth products and mobility. Daniel Reis is no longer at the firm.

SRS Legal is valued for its ‘outstanding command’ of the data privacy, data protection and cybersecurity regulatory framework, delivering comprehensive advice on projects, including GDPR implementation, anonymisation of health data and international data transfers. The ‘fully reliable and knowledgeable’ team also provides DPO and AI governance and compliance services to a wide range of organisations. Practice head Luís Neto Galvão is a ‘leading expert’ in data protection in the financial, healthcare and telecoms sectors. Raquel Gomes Chainho and Miguel Mesquita advise on regulatory and contractual issues, including the implementation of GDPR compliance programmes and digital transformation projects.

Combining ‘deep legal expertise’ with ‘commercial awareness’, Abreu Advogados is well positioned to advise across the full range of data privacy and cybersecurity matters, including GDPR implementation, compliance, incident response and engagement with regulatory authorities. The practice is co-led by Ricardo Henriques, regarded for his ‘outstanding’ expertise at the intersection of data governance, emerging technologies and information security, and Simão de Sant’Ana, an expert in workers’ data privacy and GDPR compliance. José Maria Alves Pereira has vast experience in e-commerce, emerging technologies and advertising.

CCA Law Firm‘s ‘specialised knowledge’ in data protection makes it a ‘fundamental ally’ to clients for privacy and cybersecurity policy drafting, audits, and regulatory compliance and implementation. The firm also acts as external DPO for clients. Filipe Mayer jointly leads the practice with Martim Bouza Serrano, recommended for his ‘technical knowledge’ and commercial awareness in digital transformation projects, and the ‘highly qualified’ Rita Serrano, who excels in data protection strategies, data breach responses and regulatory compliance.

CMS draws on ‘deep knowledge’ of data protection to deliver comprehensive, tailored regulatory support on GDPR compliance, project deployment, policy design and data breaches. The practice is led by José Luís Arnaut, also an IP professional, and João Leitão Figueiredo, who is regarded for his ‘exceptional’ know-how on all aspects of data protection compliance. Both are supported by Ricardo Pintão, Sara Rocha and Catarina Ferreira da Silva, the latter having joined from Sérvulo & Associados in September 2024.

CS’Associados offers comprehensive data protection and privacy advice to leading clients in sectors such as retail, pharmaceuticals and communications. Practice head Maria João Faísca arrived in August 2025 from Impresa’s legal department, bringing experience in cybersecurity, privacy and personal data in the telecoms, media, advertising and e-commerce sectors. Former practice head Jorge Silva Martins and his team of associates departed the firm in May 2025.

Recommended for its technical knowledge of data protection, Garrigues Portugal supports clients in technology, healthcare, finance and retail, implementing new projects, apps and platforms through regulatory advice, policy drafting and agreements, as well as GDPR compliance and data breach management. Practice head Manuel Liberal Jerónimo, noted for his strong track record in corporate and M&A, also advises on technology and data protection matters. Luísa Cyrne and Matilde Bettencourt, recommended for their ‘extensive’ knowledge, ensure compliance with national and European legislation.

Drawing on deep regulatory knowledge of data privacy and protection, Sérvulo & Associados assists with GDPR compliance, incident responses, data governance, data sharing and impact assessments across healthcare, finance, telecoms and public administration. The team saw significant expansion in December 2025, with the arrival of the experienced Ana Ferreira Neves and Pedro Vidigal Monteiro from TELLES, along with a team of associates. Monteiro now leads the practice. Former co-practice head Ana Rita Paínho and associates Ana Mira Cordeiro and Inês de Sá have departed the firm.