Ricardo Bordalo Junqueiro is quoted in an article in the Expresso newspaper entitled ‘Portugal will miss European information security directive deadline: law expected by mid-2025’. The article discusses Portugal's delay in transposing the Directive on Network and Information Security 2 (NIS 2), whose deadline was 17 October 2024. This directive establishes new cybersecurity rules and requirements for several sectors of the economy, with severe penalties for non-compliance.

Consulted by Expresso, Ricardo Bordalo Junqueiro explains that ‘Depending on the severity, the Court of Justice of the European Union (CJEU) can impose fines with a fixed amount, or opt for fines that increase with each passing day without the offence being remedied.’

In the event of a delay in transposition, ‘the case law of the CJEU gives private individuals the possibility of bringing actions against states when rights are at stake that cannot be exercised due to a delay or poor transposition,’ explains the VdA lawyer.

• This article is available here.