Transposition of the NIS 2 Directive: Cybersecurity Legal Framework

On 4 December, Decree-Law 125/2025 was published, establishing the new legal framework for cybersecurity (the “Cybersecurity Legal Framework” or “CLF”).

The long-awaited Cybersecurity Legal Framework clarifies the obligations of each covered entity. It also defines the processes for implementing and improving information security management systems, which can now be implemented in compliance with the obligations arising from the transposition.

This practical guide provides information on the most important changes to the new Cybersecurity Legal Framework.