Global FinTech Guide
Country Name
RegTech and compliance management
RegTech is composed of the words “regulatory” and “technology”. It is a collective term for the application of modern technologies, to get the increasing regulation in the banking- and financial sector under control both from an IT and a legal standpoint.


Attitude of the country towards RegTech-services

The use of technology to comply with regulatory requirement became a basic expectation of the regulators in Portugal. Several FinTechs in the area of Financial Crime combat have appeared and developed, such as Elucidate, Fraudio, and Feedzai (first Portuguese FinTech Unicorn).
International FinTechs, such as Oxford Risk, are also operating in Portugal in cooperation with incumbents to help them to comply with suitability requirements arising from MIFID II.

Legal affairs  

Obligations and requirements to provide RegTech-services

No license is required, but outsourcing agreements with authorised firms must be in place. RegTech is subject to the regulation applicable to the regulatory duties to be satisfied by the technology. The banking legislation specifically foresees outsourcing agreements for the use of technological instruments for the performance of ancillary activities in AML, internal control, and whistleblowing.

Additional comments regarding the legal situation for RegTech-services or what RegTech’s must be aware of in this business area

Collaboration scenarios have focussed the attention of supervisory authorities to the outsourcing and cyber risk arising from the fragmentation of the value chain, so they need to be framed by robust contracts that establish appropriate mechanisms to mitigate and manage the inherent risks and, in most cases, subject to prior communication to competent authorities (Bank of Portugal, CMVM or Insurance Authority, as applicable).

Economic conditions

Market size for RegTech-services and biggest companies in this business area

No public data available.

Additional comments regarding the economic situation for RegTech-services or what RegTech’s must be aware of in this business area




© 2022, Abreu Advogados. All rights reserved by Abreu Advogados as author and the owner of the copyright in this chapter. Abreu Advogados has granted to Multilaw non-exclusive worldwide license to use and include this chapter in this guide and to sublicense Lexis Nexis, a division of RELX Inc. and its affiliates certain rights to use and distribute this guide.

The information in this guide provides a general overview at the time of publication and is not intended to be a comprehensive review of all legal developments nor should it be taken as opinion or legal advice on the matters covered. It is for general information purposes only and readers should take legal advice from a Multilaw member firm.


Choose country