Metadata, which encompasses information such as the time, date, duration of phone calls and the location of mobile phone towers, is essential in various applications, including security and criminal investigation. However, they also raise significant privacy concerns, as they can reveal patterns of behaviour, relationships and personal habits.

The new legislation reflects the Portuguese government’s endeavour to balance the need for security with the protection of individuals’ privacy, requiring stricter judicial oversight for access to and conservation of metadata. This measure is part of a growing trend in European and global legislation to strengthen the protection of personal data and citizens’ privacy, in response to concerns about the use and abuse of personal information in the digital age.

In addition, this legislation modifies Law 32/2008, in accordance with Directive 2006/24/EC of the European Parliament and of the Council, and is aligned with the decisions of Constitutional Court Judgments 268/2022 and 800/2023, as well as with the Law on the Organisation of the Judicial System.

GDPR Department

Marta Valadas Coriel | Sofia Batista Linguiça