Lisbon, Dec. 4, 2025 (Lusa) - The National Communications Authority (Anacom) will assume the duties and powers of the National Cybersecurity Authority, following the publication of the new cybersecurity legal regime on Thursday.
"In this new capacity and within the scope of this law, Anacom will become part of the institutional framework for cybersecurity concerning electronic communications and postal services," the regulator said.
In this capacity, "it will play, among other things, an important role in the management and handling of cybersecurity incidents in its sector, in close coordination with the National Cybersecurity Centre (CNCS), cooperating in the definition of procedures for notification, response and recovery from incidents, as well as in the sharing of operational information necessary for the prevention, detection and mitigation of cyber threats to electronic communications and postal services, contributing to the overall resilience of the sector and the protection of users".
Anacom also participates at the strategic level in the governance of national cybersecurity through the Higher Council for Cyberspace Security. This strategic coordination body supports the prime minister in cybersecurity matters.
In this context, it "contributes to institutional coordination and the definition of national strategic guidelines in this area, strengthening the coherence of the national response to risks and threats in cyberspace".
Decree-Law 125/2025 of 4 December transposes the NIS2 Directive, Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December, and is intended to ensure a high common level of cybersecurity throughout the Union, entering into force within 120 days.
Anacom also assumes the role of competent authority and coordinator of digital services in Portugal within the scope of the Digital Services Regulation and has been designated as one of the competent authorities for data intermediation services within the scope of the Data Governance Regulation.
It is also one of the entities responsible for supervising compliance with the obligations set out in European Union legislation protecting fundamental rights regarding the use of high-risk artificial intelligence systems, the entity states.
It also has the powers and responsibilities of the Space Authority.
ALU/ADB // ADB.
Lusa
