A specialist digital law practice.

CyberLAWYERS.pt advises international organisations on the European rules that govern how they use data and technology.

01The firm

CyberLAWYERS.pt has practised digital law since 2010. It is not a general practice with a technology department; digital law is the whole of its work.

The firm is founder-led by design. The lawyer who scopes a matter is the lawyer who runs it — there is no delegation to junior fee-earners, and no handover between the person you brief and the person who advises you. Where a mandate requires additional legal, technical or foreign-law capability, we assemble it from specialists selected for that matter, and tell you who they are.

We are qualified in Portugal and work in English. Our clients are international groups operating in or through Portugal, technology and financial businesses entering the European market, and foreign counsel who need specialist Portuguese and EU digital-law capability alongside their own.

02Manifesto

Expertise beyond Law & Technology

Digital regulation applies to systems, not to documents. The obligations attach to data flows, model architectures, logging, retention, supplier chains and controls — not to the policy that describes them.

Advice that stops at the legal text produces an opinion the client cannot implement, and leaves them holding the hardest part of the problem. We work where law, technology and governance actually meet, which is where the obligations bite.

03How we describe our work

We do not name clients. Mandates are described by sector and scale, and nothing on this site identifies a client directly or by implication. A practice that advises on confidentiality is judged first on its own.

Public institutional appointments already in the public domain are a different matter and appear where relevant.

04Sectors

Financial services, payments and FinTech — DORA, payment regulation, and the data protection questions that follow from operating payment infrastructure.
Technology, SaaS and digital platforms — AI Act roles, platform obligations, contracting, and the regulatory position of the product itself.
Digital identity and trust services — eIDAS, electronic signatures, and the identity layer that most digital regulation now assumes.
Public sector and regulated entities — NIS2 scope, data protection in public administration, and procurement of digital services.

Expertise beyond Law & Technology

Digital regulation applies to systems, not to documents. We work where law, technology and governance actually meet — which is where the obligations bite.