Portugal
Facilitating online business with digital signatures and PKI solutions in Portugal
PKI, digital trust, and digital and electronic signatures in Portugal
Portugal’s embrace of digital trust and electronic signatures has been groundbreaking. Since the late 1990s, with public key infrastructure (PKI) as a foundation, the country has fostered a secure online environment. Early adoption of electronic signatures, pioneered by the Citizen Card in 2003, empowered citizens and revolutionised various sectors.
Key Benefits
-
Robust security
Our products and services are built with security in mind. They act as a line of defence, protecting your data, systems, and infrastructure against malicious attacks. We empower your organisation to prevent unauthorised access to sensitive information and pre-empt online fraud. We enable you to continuously monitor your digital presence and respond quickly to security incidents and boost your credibility by helping you demonstrate your digital trust commitment to customers and partners.
-
Simplified compliance
Ever-changing regulations can make compliance challenging. We simplify this process by offering comprehensive solutions that meet the requirements of GDPR, the Cybersecurity Act, and other relevant regulations. With Ascertia you can quickly identify any security gaps and non-compliant practices, implement effective data controls, and demonstrate compliance with ease.
-
Gain a competitive advantage
The digital era is increasingly competitive, and trust is a premium asset. Ascertia’s digital trust products help Portuguese organisations stand out from the competition by demonstrating their commitment to security, privacy, and online ethics.
Electronic and digital signature laws and regulations in Portugal
Portugal’s progressive approach to digitisation has paved the way for a thriving e-signature ecosystem. However, navigating the intricacies of relevant laws and regulations can pose a challenge for companies entering this dynamic ecosystem.
Ascertia stands as your partner in harnessing the power of legally binding electronic signatures within Portugal’s framework. We offer comprehensive compliance with all current digital and electronic signature regulations, including the recent mandates for e-invoicing.
Portugal’s PKI, data privacy and electronic signature regulations and laws:
- Decree-Law no. 290-D/99 of 2 of August and the Electronic Signature Ordinance: Before this law was enacted in 1999, electronic signatures were in a legal grey area in Portugal. This law established three types of digital signatures, each with validities and evidence admissibility in court.
- European Union (EU) eIDAS 2 Regulation (EU No. 910/2014): As an EU member state, Portugal falls under the eIDAS regulation, which governs electronic identification and trust services across the EU. It defines three types of electronic signature:
- Simple Electronic Signature (SES): Basic digital mark, like a typed name or scanned signature. Legal, but not as robust as more secure electronic signatures.
- Advanced Electronic Signature (AES): This signature type is linked to the signer and created using secure means. It holds legal weight similar to a handwritten signature.
- Qualified Electronic Signature (QES): This eSignature type is issued by a QTSP. It meets strict eIDAS requirements and is considered equivalent to a handwritten signature in most cases.
- General Data Protection Regulation (GDPR): The GDPR applies to all personal data processing within the EU, including Portugal. It sets strict standards for data collection, use, and storage.
- Law no. 58/2019: This law implemented the GDPR into Portuguese law and replaced the country’s previous Data Protection Act.
- Law no. 41/2004: This law covers privacy in electronic communications, including email marketing and cookie usage. This law is currently being revised by the ePrivacy Regulation (still under development).
- E-invoicing mandates: Since 2019, Portugal required e-invoicing for B2B transactions with public authorities. In 2023, this was expanded to include all B2B transactions. It provides the framework for qualified e-invoices from QTSPS, making them mandatory for public authorities.
- Decree-Law no. 65/2021: This law regulations cyberspaces security and establishes obligations for cybersecurity certification.
*The laws represented are correct at the time of writing
Why do organisations in Portugal choose Ascertia?
Choosing Ascertia for your digital trust needs in Portugal means partnering with a local leader with a proven track record of success. We understand the unique challenges and opportunities of the Portuguese market, and we are committed to providing you with the most effective and reliable solutions, tailored to your organisation’s specific needs.
With Ascertia, you can rest assured that your digital assets are protected, and your online reputation is secure. We offer a comprehensive suite of products and services and are always here to support you with expert guidance and personalised service.
Contact us today to learn more about how Ascertia can help you achieve your digital trust goals. Let us be your partner in navigating the ever-evolving landscape of digital security and compliance.