Yes, web scraping is legal in Portugal when conducted within the bounds of EU and national laws, particularly GDPR and copyright statutes. However, unauthorized extraction of personal or protected data risks severe penalties under CNPD oversight.
Key Regulations for Web Scraping in Portugal
- GDPR Compliance: Scraping personal data requires a lawful basis (e.g., consent, legitimate interest) and adherence to data minimization principles. The Comissão Nacional de Proteção de Dados (CNPD) enforces strict penalties for violations, including fines up to €20 million or 4% of global turnover.
- Copyright Law (Decreto-Lei n.º 63/85): Automated extraction of copyrighted content without permission violates Article 75, exposing scrapers to injunctions or damages. Exceptions apply for research or private use under Article 75(2).
- Unfair Competition (Decreto-Lei n.º 144/2001): Aggressive scraping that overloads servers or bypasses anti-bot measures may constitute Article 11 violations, leading to civil liability or criminal charges under Article 221 of the Penal Code.
Critical 2026 Shift: The EU Data Act (effective 2026) will impose stricter obligations on data access and interoperability, potentially limiting scraping of IoT and industrial data without contractual consent. Portuguese businesses must align with CNPD’s forthcoming 2025 Guidelines on Automated Data Processing.