cyberLAWYERS.pt

In the first hours of an incident? Legal counsel, now.

+351 919 497 920

Message on WhatsApp if your phone line or email is compromised.

João Ferreira Pinto, lawyer. Lisbon. Calls answered in Portuguese, English and Spanish.

The clocks are already running

  • GDPR72 hoursto notify the CNPD of a personal-data breach
  • NIS224 hoursfor the early warning on a significant incident
  • DORA4 hours from classification, 24 hours from detectionfor the initial notification of a major ICT-related incident
  • CRA24 hoursto report an actively exploited vulnerability

Counting starts at awareness, not at confirmation.

What we do in the first hours

Qualify
A rigorous legal qualification, not a technical triage: personal-data breach under the GDPR, significant incident under NIS2, ICT-related incident under DORA, actively exploited vulnerability under the CRA. One, several, or none. The qualification determines every clock and every duty that follows.
Contain, legally
Privilege, evidence, communications discipline.
Notify
The competent regulators (CNPD, CNCS, ANACOM, Banco de Portugal, CMVM, ASF, ENISA, sector authorities), data subjects, clients and counterparties, your insurer, your forensic team, your existing lawyers, and, where a crime is involved, law enforcement. In the right order, with the right wording.
Document
The lawyer-drafted record that defends you six months later.

Who answers the phone

João Ferreira Pinto. Data lawyer since 2013, practising since 1999. Group DPO of a national payments infrastructure. Former DPO of Portugal's Supreme Court of Justice. Negotiated EU digital files at the Council during the 2021 Portuguese Presidency. Lectures on data protection at the University of Lisbon School of Law.

Before the incident

Leave your details. João Ferreira Pinto calls you back within one business day.

Request received. You will hear from João Ferreira Pinto within one business day.

Your details are used only to return your call. See the privacy notice.

Privacy notice

Controller: João Ferreira Pinto & Associados, Sociedade de Advogados, SP, RL, Amoreiras Torre 2, 10.º – 11, Av. Eng.º Duarte Pacheco, 1070-101 Lisboa. Contact: jfp@cyberlawyers.pt.

  • Purpose and legal basis: returning the contact you requested (steps prior to entering into a contract, at your request, Article 6(1)(b) GDPR).
  • Data: name, professional email, organisation, role, phone, and the time of your request.
  • Retention: 6 months from the request, unless a client relationship follows.
  • Recipients: none. Form data is processed on servers located in the European Union and is not transferred outside the EU.
  • WhatsApp: if you choose to message us, the service is provided by Meta Platforms Ireland Ltd under its own terms; messages are end-to-end encrypted and their content is processed by us solely for the purpose of providing legal services, under professional secrecy.
  • Your rights: access, rectification, erasure, restriction, portability and objection, by email to the address above; and the right to lodge a complaint with the CNPD.

This page sets no cookies and uses no analytics.