The Lisbon City Council was fined by the National Data Protection Commission (CNPD) for sharing personal data of Russian activists. The initial fine amount was reduced throughout the process, due to the statute of limitations on some administrative offenses.
The sanction applied to the Lisbon municipality was ultimately set at 463 thousand euros, a significantly lower amount than what had been initially proposed by the data protection authority.
The process has been ongoing for some time, with the CNPD applying fines that have been subject to progressive reductions, as different infractions reached the statute of limitations and could no longer be sanctioned.
The unauthorized sharing of data of Russian citizens by the Lisbon City Council was the central reason behind this sanctioning action by the Portuguese regulatory entity.




