Newsletters
MyCiber Platform: Registration deadline ends on 15 September
Organisations falling within the scope of the new Portuguese Cybersecurity Legal Framework, approved by Decree-Law No. 125/2025 of 4 December, which transposed the NIS 2 Directive, must complete their self-identification and registration on the MyCiber platform by 15 September 2026, provided they are already operating.
Regulation No. 756/2026 of 22 June further implemented this framework, including the rules governing the operation of MyCiber, a platform developed and managed by the Portuguese National Cybersecurity Centre (CNCS) for the purposes of complying with several obligations under the new regime.
Who is covered?
The new regime applies to a broad range of organisations, including entities operating in sectors such as digital services, energy, transport, banking, healthcare, digital infrastructure, postal and courier services and manufacturing, as well as relevant public sector entities.
Whether an organisation falls within the scope of the regime will depend, in particular, on its sector and subsector of activity, its size and the specific services it provides.
ANACOM has specifically alerted electronic communications operators and postal service providers to the need to comply with this deadline.
What should organisations do?
Organisations should:
- confirm whether they fall within the scope of the new Portuguese Cybersecurity Legal Framework;
- if so, complete their self-identification and registration on the MyCiber platform by 15 September; and
- prepare to comply with the remaining obligations arising under the new regime.
Entities commencing operations after this date must complete their registration within 30 days of starting their activities.