In July, the European Commission presented a legislative package introducing significant proposals in the digital sector, with a direct impact on the GDPR, cybersecurity, and the regulation of artificial intelligence.
Among the main measures are: the proposal to simplify the GDPR for SMEs and start-ups, the transposition of the NIS 2 Directive in Portugal — which strengthens cybersecurity obligations for critical entities — and the publication of practical guidelines for the application of the Artificial Intelligence Regulation, which is still scheduled to come into force in August 2025.