Portugal - Digital Services Rules (49/2024)

Decree-Law No. 49/2024

Decreto-Lei n.º 49/2024

Portugal

RAI-PT-NA-DN4RPXX-2024
Effective: August 13, 2024
In Force(In Force)
DecreeGovernance and OversightConformity Assessment and Registration
Export PDF

Decreto-Lei n.º 49/2024 (8 August 2024) creates a legal framework requiring Portuguese public administration entities to provide digital services under a unified omnichannel model centered on the Portal Único de Serviços Digitais (gov.pt), and mandates adoption of a common reference model (Mosaico) and specified technical and organisational measures to ensure interoperability, accessibility and continuity of service. (dre.tretas.org)

Overview

Decreto-Lei n.º 49/2024, published in the Diário da República on 8 August 2024, establishes a legal framework for the provision of digital services by the Portuguese Public Administration and mandates the creation of an omnichannel system of public service delivery under the single brand gov.pt. The measure requires public entities to provide a continuous, integrated and homogeneous user experience regardless of channel (telephony, web, mobile, in-person) and designates gov.pt as the centralised portal for the administration's digital services. Implementation timelines and maximum deadlines for the measures set by the decree were subsequently detailed in Portaria n.º 345/2024/1 (19 December 2024). For official descriptive material and implementation guidance, see the national digital public administration portal and the Mosaico guidance pages. Decree text (Diário da República), digital.gov.pt operationalisation page.

Definitions

The decree defines the "omnichannel" model as a service-delivery approach ensuring a continuous, integrated and homogeneous experience across all public contact channels. Key defined terms include: "gov.pt" (the Portal Único de Serviços Digitais and associated brand), "Linha Cidadão" (national telephone entry), "Loja de Cidadão" (physical service points), "App gov.pt" (mobile application), and "federated" availability of services (services provided by different entities but discoverable and usable via the centralised portal). The legal text also references the "Mosaico" common reference model for service design and technical integration requirements referenced in the accompanying specifications. Mosaico guidance.

Governance and Institutional Framework

Responsibility for oversight and verification of compliance with the decree is assigned to the Agency for the Technological Reform of the State (ARTE) and to the ministerial services responsible for modernization and sectoral areas. ARTE performs prior verification duties when public entities propose new investments, systems or applications, ensuring consistency with the omnichannel architecture and federation model. Operationalisation is supported by cross-government instruments: the Caderno de especificações (implementation workbook), sectoral portarias (e.g., Portaria n.º 345/2024/1 for implementation calendars), and the Mosaico model for design and development. Publication of entity-specific implementation calendars and the centralised catalogue of services (Catálogo Único de Serviços Públicos) is mandated; digital.gov.pt hosts implementation releases, FAQs and sectoral guidance. See the operationalisation hub for downloadable guides and the Portaria for calendar annexes. digital.gov.pt — documents, Portaria n.º 345/2024/1 (Diário da República).

Key Focus Areas

The decree focuses on: (1) user-centred omnichannel delivery under the gov.pt brand to guarantee continuity between telephone, web, mobile and in-person channels; (2) federation and interoperability so each entity’s services are discoverable and usable via the portal while preserving organisational responsibilities; (3) adoption of the Mosaico common reference model and alignment with the Agora design system to ensure visual, accessibility and interaction consistency; (4) catalogue and inventory obligations requiring all services to be listed in a single catalogue (Catálogo Único de Serviços Públicos / CUSP); (5) technical integration with state platforms (authentication.gov, Platform for Payments of the Public Administration, messaging platforms) and mandated use of state authentication mechanisms (Cartão de Cidadão and Chave Móvel Digital as standard secure methods); (6) transparency and open data obligations for service metadata and performance information; and (7) phased timelines and sectoral portarias to sequence implementation, including migration of high-use or multi-entity services as a priority. The decree references alignment with applicable EU instruments and best practice models for e-government and cross-border digital service interoperability. Mosaico — FAQ and specifications.

Implementation Framework

Implementation is organised through a combination of legal obligations and operational instruments: (a) immediate inventories and service lists (initial deadlines set in the decree and Portaria), (b) federated publication of services on gov.pt with technical gateway connectors and APIs, (c) migration of existing portals and applications to the common design system and reference architecture, (d) mandatory registration of services in the national catalogue and harmonisation of metadata fields, and (e) use of state authentication, payment and messaging platforms where applicable. Sectoral portarias set maximum deadlines and annexed timetables specify different target dates for tasks such as design updates, catalogue completion and platform adoptions. Public entities must notify ARTE or the responsible authority for planned investments to obtain conformity verification prior to deployment. Operational guidance on digital.gov.pt, Portaria n.º 345/2024/1 annexes.

Monitoring and Evaluation

Monitoring combines administrative oversight, publication of implementation calendars, and performance/satisfaction measures. The decree foresees reporting and verification mechanisms: ARTE and sectoral ministries publish sectoral calendars and maintain compliance registers on digital.gov.pt; entities must supply inventories, progress updates, and service-level metadata to enable aggregated monitoring. The Mosaico caderno and related FAQs describe required metrics and reporting formats; the state may collect user satisfaction statistics and operate quality assurance on assistance and problem-resolution processes. Non-compliance can trigger administrative follow-up, technical remediation requests and potential prevention of new digital investments until conformity is achieved. digital.gov.pt, Mosaico.

Penalties, Liability, and Appeals

The decree establishes administrative obligations and oversight but does not create a novel criminal regime; enforcement is administrative and sectoral portarias specify time-limited compliance obligations and verification procedures. ARTE and responsible ministries may require corrective measures, conditional approvals for new investments and deprioritise funding for non-conforming projects; sectoral regulations and existing administrative liability rules provide the framework for sanctions where applicable. Entities and affected users retain ordinary administrative and judicial remedies for disputes or alleged rights violations (including data protection complaints to CNPD). The decree’s interaction with broader administrative liability and data-protection regimes means that failures affecting personal data, accessibility or fundamental rights can trigger separate enforcement under the GDPR, national administrative law or specialized statutes. Decree text.

Relationship to Other Instruments

The decree operates alongside and references: national platform initiatives (authentication.gov, public payments platform), the Mosaico design and technical model, the Ágora design system, Portaria n.º 345/2024/1 which sets implementation calendars, and relevant EU instruments (notably Regulation (EU) 2018/1724 on single digital gateways) where online, end-to-end and cross-border digital service features overlap. It supersedes fragmented portal governance practices by centralising discovery and user entry under the gov.pt brand and may require amendment of sectoral portarias to align sector-specific services. See the operationalisation pages and Mosaico specification for cross-references. Mosaico, Portaria 345/2024/1.

International Alignment

The decree references and aligns Portugal’s approach to international and EU norms for digital public services, notably encouraging compliance with Regulation (EU) 2018/1724 principles for single digital gateway services (quality of information, fully online procedures, user assistance, evidence mapping). The Mosaico guidance also highlights interoperability and cross-border considerations where state services interact with EU-level technical building blocks. The gov.pt centralisation mirrors EU best practices for portal consolidation and single digital access points and seeks to facilitate cross-border interaction where applicable. Mosaico — references to EU rules.

Implementation Timeline

MilestoneDeadline / Target date
Inventory of portals, apps and high-demand services30 September 2024 (initial inventory requirement in decree)
Publication of implementation calendars (portaria)30 November 2024 (decree specification)
Portaria n.º 345/2024/1 — sectoral annex deadlines (selected)19 December 2024 (Portaria publication)
Adopt Platform for Payments where relevantApril 2025 (annex i target)
Cataloguing of all services in Catálogo Único de Serviços PúblicosDecember 2025 (annex i) / June 2026 or Dec 2026 (annex ii depending on scope)
Authentication mechanisms (Card and Chave Móvel Digital as standard)December 2025 (annex i) / June 2026 (annex ii)
Design system and channel migration2026–2028 (phased deadlines in annex ii; final target dates up to December 2028)

Compliance Checklist

RequirementAction
Federated publication on gov.ptRegister services and ensure discoverability via the portal; implement connectors/APIs
Adopt Mosaico reference modelAlign service design and metadata with Mosaico specifications
Design system alignmentMigrate UI/UX to the Agora/design system used by gov.pt
Catalogue servicesComplete Catálogo Único de Serviços Públicos entries with required metadata
AuthenticationEnable Cartão de Cidadão and Chave Móvel Digital via authentication.gov
Payment integration (if applicable)Adopt the Plataforma de Pagamentos da Administração Pública
Open data & transparencyPublish service metadata and performance metrics in open formats

Sources and References

SourceType
Decreto-Lei n.º 49/2024 (Diário da República)Primary Source
Operationalisation — digital.gov.ptPrimary Source / Implementation guidance
Decree documents — digital.gov.ptPrimary Source
Mosaico — FAQ and technical specificationsPrimary Source / Technical guidance
Portaria n.º 345/2024/1 (Diário da República)Primary Source
Plain English

This Portuguese law mandates that all public administration entities must provide their digital services through a unified, consistent system under the gov.pt brand, ensuring a seamless experience for users across all contact channels.

The new framework applies to every public administration entity in Portugal, requiring them to transform how they deliver services online, via mobile apps, telephone, and in-person. The core idea is to centralise access and standardise the user journey. Key obligations include: - All digital services must be discoverable and usable through the central gov.pt portal. - Entities must adopt the "Mosaico" common reference model and "Agora" design system to ensure visual, accessibility, and interaction consistency across all services. - Every public service must be listed in a single national catalogue, the Catálogo Único de Serviços Públicos, with standardised information. - Integration with central state platforms is mandatory, including using the official authentication methods like Cartão de Cidadão (Citizen Card) and Chave Móvel Digital (Digital Mobile Key), and the Public Administration Payments Platform where applicable.

The decree came into force on August 13, 2024, but implementation is phased, with various deadlines extending until December 2028, as detailed in a separate ministerial order (Portaria n.º 345/2024/1). Oversight and compliance verification fall to the Agency for the Technological Reform of the State (ARTE) and relevant ministries. While the law doesn't create new criminal penalties, non-compliance can lead to administrative follow-up, demands for corrective action, and crucially, new digital investments by public entities may not receive approval or funding if they don't align with the new omnichannel architecture. A practical pitfall for teams is that any planned new digital service or system investment now requires prior verification from ARTE, meaning early engagement and design alignment are critical to avoid delays or rejection.

Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.

© Regulations.AI — created on 13-Jun-2026