Skip to main content
Client access Talk to us

Latest edition

Blog · 267 analyses

Regulation, AI and cybersecurity, with sources in view.

Context for better decisions.

Analysis on AI, cybersecurity, regulation, governance and digital systems. With sources, practical consequences and one clear next action.

Showing

Regulation

49–54 of 54

Current knowledge, organised by topic, date and practical consequence.

Team removes a disproportionate geometric weight from two choice paths with equivalent presentation
A free choice depends on the relationship between options, not only on each button viewed in isolation.AI-generated image under Velqory editorial direction.
Regulation12 min read

DSA and dark patterns: audit the choice before measuring conversion

Article 25 prohibits online platforms from designing interfaces that deceive, manipulate, or materially impair free and informed decisions. Portugal added its national enforcement framework in 2026, with coordination across ANACOM, ERC, and CNPD.

Read analysis
Engineers rehearse the transfer of generic modules between two unbranded infrastructure frames
Removing exit charges does not remove technical dependencies; the plan still needs data, assets, timing, and proof of operation.AI-generated image under Velqory editorial direction.
Regulation11 min read

Data Act: prepare cloud exit before switching charges disappear

From 12 January 2027, in-scope providers may not charge customers for the switching process. That does not make applications portable by magic: contracts, formats, interfaces, dependencies, and tests must be ready before an exit request.

Read analysis
Person uses a keyboard at a desk with headphones, a tactile controller, and abstract contrast cards
Accessibility needs testing across the real journey, including technology, content, and support.AI-generated image under Velqory editorial direction.
Regulation16 min read

Digital accessibility in Portugal: a plugin does not prove compliance

Portugal's regime transposing the European Accessibility Act has applied since 28 June 2025 to covered products and services. In e-commerce, evidence must cover the complete journey — information, identification, purchase, payment, support, and assistive technologies.

Read analysis
Generic connected device accompanied by exportable structured data and metadata components
After 12 September 2026, data access becomes a verifiable property of the product and its related service.AI-generated image under Velqory editorial direction.
Regulation14 min read

Data Act: data access in connected products placed on the market after 12 September 2026

The Regulation already applies. For the first product placed on the market after 12 September 2026, Article 3(1) turns format, metadata and access by default into product requirements — not a future portal enhancement.

Read analysis
Hands inspect a module from a generic disassembled device on an organised workbench
The right to repair requires teams to separate covered product, responsible operator, time, price and consumer evidence.AI-generated image under Velqory editorial direction.
Regulation11 min read

Right to repair: the EU deadline passed — and Portugal needs confirmation

Directive (EU) 2024/1799 had to be transposed and applied from 31 July. The EUR-Lex database consulted today shows zero measures notified by Portugal; that is a verification alert, not permission to invent national law.

Read analysis
Two people analyse a conceptual service dependency map at a table
NIS2 preparation starts by making critical services, dependencies, decisions and implementation evidence visible.AI-generated image under Velqory editorial direction.
Regulation22 min read

NIS2 in Portugal: the operational dossier that separates deadlines, duties and evidence

Decree-Law 125/2025 is in force and Regulation 756/2026 made the regime operational. This guide explains who must act, what management must decide, how incident reporting works and what evidence should exist.

Read analysis

How we publish

Each analysis links to the official source and says what changes in practice.

  1. 01Sources in view

    Every analysis links the official documentation it relies on.

  2. 02Operational context

    We translate change into decisions, owners and evidence.

  3. 03Continuous review

    We update the analysis when facts or guidance change.

  4. 04Identified imagery

    We disclose generated photography and credit documentary photography.

From context to execution

Is there an obligation or a system that needs to become operational?

We map the problem, write the scope and build the solution with acceptance criteria.