NIS2 · National implementation
NIS2 in Portugal
Portugal transposed NIS2 through Decreto-Lei n.º 125/2025, establishing the Regime Jurídico da Cibersegurança (RJC).
- National law
- Decreto-Lei n.º 125/2025 (Regime Jurídico da Cibersegurança)
- Cybersecurity legal regime
- Status
- In force
- In force
- 2026
- Authority
- CNCS
Supervision
The CNCS (Centro Nacional de Cibersegurança) is the national authority and CSIRT (CERT.PT). Registration and reporting run through CNCS channels; the RJC replaces Portugal's NIS1-era framework (Lei 46/2018).
What is specific to Portugal
The RJC consolidates cybersecurity duties into one regime and empowers CNCS with a technical-instruction layer beneath the law. Portuguese entities previously certified under the national Quadro Nacional de Referência para a Cibersegurança (QNRCS) will find it maps naturally onto Article 21.
Official sources
Primary references: the national statute book at diariodarepublica.pt and the national cybersecurity authority at www.cncs.gov.pt.
NIS2 in Portugal: frequently asked questions
Last reviewed:
Related reading
Definitions