New Portuguese Law Shields Ethical Hackers from Prosecution

Portugal updates its cybercrime law (Decree Law 125/2025) to grant ethical hackers a ‘safe harbour’ from prosecution. Learn the strict rules researchers must follow, including immediate disclosure to the CNCS, and how other nations are following this trend.

Portugal has recently taken a significant step forward for online safety by updating its cybercrime law. This change, which was made public in the official Portuguese Journal (Diário da República) on December 4th under Decree Law No. 125/2025, basically gives cybersecurity researchers and ethical hackers (experts who use their skills for good) a ‘safe harbour’ from prosecution.

The change was first spotted and publicised by security expert Daniel Cuthbert, the Global Head of Cyber Security Research for the Santander Group and co-chair of the UK Government’s Cyber Security Advisory Board.

Portugal: not just a country of amazing Pasteis de Nata's but now solid cyber laws too. They've ...