> ## Documentation Index
> Fetch the complete documentation index at: https://docs.botbrains.io/llms.txt
> Use this file to discover all available pages before exploring further.

# AI Cold Calling Laws in Portugal

> Is AI cold calling legal in Portugal? Consent rules for automated B2C and B2B calls under Lei 41/2004, the DGC and AMD opt-out lists, recording, and AI disclosure.

export const reviewed_0 = "October 2026"

In Portugal, an AI agent may only make marketing calls to private individuals, including sole traders, who gave prior express consent. You may call companies and other legal persons until they object or join the national opt-out list of the Directorate-General for Consumers (DGC). The key law is [Lei n.º 41/2004](https://diariodarepublica.pt/dr/legislacao-consolidada/lei/2004-106523049), Art. 13.º-A and 13.º-B, which the data protection authority CNPD enforces.

<Note>
  This page summarizes the law as of {reviewed_0} to help you plan AI phone calls. It isn't legal advice. Laws and how regulators apply them change, so check your use case with a lawyer before you start a campaign.
</Note>

## At a glance

| Call | To consumers (B2C) | To businesses (B2B) |
| - | - | - |
| Inbound service call | <Icon icon="circle-check" color="#16a34a" /> Allowed. Disclose the AI. | <Icon icon="circle-check" color="#16a34a" /> Allowed. Disclose the AI. |
| Outbound service call | <Icon icon="circle-check" color="#16a34a" /> Allowed | <Icon icon="circle-check" color="#16a34a" /> Allowed |
| Marketing callback the person asked for | <Icon icon="circle-check" color="#16a34a" /> Allowed. Stay within what they asked for. | <Icon icon="circle-check" color="#16a34a" /> Allowed. Stay within what they asked for. |
| Marketing call by an AI agent to existing customers | <Icon icon="circle-check" color="#16a34a" /> Allowed for your own similar products. Offer an opt-out on every call. | <Icon icon="circle-check" color="#16a34a" /> Allowed unless registered on the DGC list. |
| Cold marketing call by an AI agent | <Icon icon="signature" color="#d97706" /> Consent required | <Icon icon="circle-check" color="#16a34a" /> Companies: allowed unless registered on the DGC list.<br /><Icon icon="signature" color="#d97706" /> Sole traders: consent required. |
| Marketing call by a human to existing customers | <Icon icon="circle-check" color="#16a34a" /> Allowed for your own similar products. Offer an opt-out on every call. | <Icon icon="circle-check" color="#16a34a" /> Allowed unless registered on the DGC list. |
| Cold marketing call by a human | <Icon icon="signature" color="#d97706" /> Consent required, per the CNPD. Screen the AMD list at minimum. | <Icon icon="circle-check" color="#16a34a" /> Companies: allowed unless registered on the DGC list.<br /><Icon icon="signature" color="#d97706" /> Sole traders: consent required, per the CNPD. |

## Is AI cold calling legal in Portugal?

Only with consent when you call a natural person. [Art. 13.º-A(1) of Lei 41/2004](https://diariodarepublica.pt/dr/legislacao-consolidada/lei/2004-106523049) reads:

> "Está sujeito a consentimento prévio expresso do assinante que seja pessoa singular, ou do utilizador, o envio de comunicações não solicitadas para fins de marketing direto, designadamente através da utilização de sistemas automatizados de chamada e comunicação que não dependam da intervenção humana \[…]."

In English: unsolicited direct marketing to natural persons needs their prior express consent, in particular through automated calling systems that work without human intervention.

**AI agents count.** No Portuguese regulator or court has ruled on conversational AI agents. An AI agent that runs the call alone works without human intervention, so treat it as automated. In Portugal the label changes little: the CNPD guideline [Diretriz/2022/1](https://www.cnpd.pt/umbraco/surface/cnpdDecision/download/121958), point 3, applies the same regime whether a machine or a human makes the call. A human who supervises or can take over doesn't change the answer.

**Companies are opt-out.** Art. 13.º-A(2) exempts subscribers that are legal persons. You may contact them, automated calls included, until they refuse and register on the DGC list. Sole traders and anyone on a private number are natural persons and must consent. The GDPR still protects the contact person, so honor every objection right away ([GDPR Art. 21](https://eur-lex.europa.eu/eli/reg/2016/679/oj)).

## Cold calls by a human

Two laws overlap. [Lei n.º 6/99](https://diariodarepublica.pt/dr/detalhe/lei/6-1999-180023), still in force, bans advertising calls to numbers on an opt-out list (Art. 5) and exempts professionals and long-standing customers (Art. 7). Lei 41/2004 Art. 13.º-A and [Decreto-Lei 24/2014](https://diariodarepublica.pt/dr/legislacao-consolidada/decreto-lei/2014-73222992), Art. 8, require the consumer's prior express consent.

The CNPD applies the stricter rule. Without a prior relationship, only prior express consent permits the call, whoever dials (Diretriz/2022/1, points 3, 22, and 83). Some industry guides still describe human B2C calls as opt-out. We follow the regulator. Calls by a human to legal persons are opt-out.

## Existing customers and callback requests

**Existing customers.** Art. 13.º-A(3) lets you use contact details from a sale to market your own similar products. Offer a free, easy way to refuse when you collect the details and on every contact, and state your identity each time (Diretriz/2022/1, points 22 to 25). Other products need consent.

**Callbacks.** A call the person asked for isn't unsolicited. Keep the request with its timestamp, number, and form text, say on the form that an AI agent will call, and stay on topic.

## Do-not-call register: DGC list and AMD opposition list

| | DGC list | AMD opposition list |
| - | - | - |
| Legal basis | Lei 41/2004 Art. 13.º-B(2) to (5) | Lei 6/99 Art. 5 |
| Who registers | Companies and other legal persons | Private individuals |
| Run by | [DGC](https://www.consumidor.gov.pt/informacao-publicidade/lista-de-pessoas-coletivas-para-nao-rececao-de-comunicacao-nao-solicitadas-marketing-direto) | [AMD](https://www.amd.pt/lista-de-oposicao-empresas), the direct marketing association |
| Covers | Direct marketing on any channel | Calls by a human and addressed mail |
| Your duty | Consult it. The DGC updates it monthly and sends it on request. | Screen before you call |
| Cost | Free to register | Free for consumers. EUR 750 a year for companies outside AMD. |

Screen both lists before every campaign, even when you hold consent. A registration made after the consent suggests the person changed their mind. botBrains doesn't screen lists for you.

## Consent for AI calls

| Requirement | What it means |
| - | - |
| Prior and express | An active statement before the first call. No pre-ticked boxes (Diretriz/2022/1, points 30 and 31). |
| Specific | Names your company, AI calls, and the purpose. Consent for "partners" or "group companies" is invalid (points 69 and 86). |
| Informed and free | Says who you are and how to withdraw. Never a condition for using a website (points 32 and 87). |
| Provable | The burden of proof is yours. Keep the consent text, context, and date (points 80 and 85), and keep a list of everyone who consented ([Art. 13.º-B(1)](https://diariodarepublica.pt/dr/legislacao-consolidada/lei/2004-106523049)). |

**Purchased lists don't work.** The CNPD rules out calls to contacts bought from brokers, and hiring a vendor because it already holds "consented" data (points 52, 53, 62, and 63). Partners in a joint campaign can collect consent together if the form names each of them (points 64 and 65). Lei 41/2004 sets no expiry date for consent.

Before you start, read [what botBrains needs for outbound campaigns](/concepts/phone/countries#before-you-start-outbound-campaigns).

## Tell callers they're talking to an AI

Since August 2, 2026, [Article 50 of the EU AI Act](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202401689#art_50) requires that people know they're talking to an AI system, at the latest when the conversation starts. This applies to inbound and outbound calls, to consumers and to business contacts, and you can't count on the exception for obvious cases when your AI agent sounds human. The [default introduction](/concepts/phone#introductions) already says that your AI agent is an AI, so keep that statement first when you edit it. When you call a consumer to sell something, the [Consumer Rights Directive](https://eur-lex.europa.eu/eli/dir/2011/83/oj/eng) also requires you to name your company, anyone you call for, and the commercial purpose at the start.

[Decreto-Lei 24/2014](https://diariodarepublica.pt/dr/legislacao-consolidada/decreto-lei/2014-73222992), Art. 5(7), also requires you to state your company and the commercial purpose at the start of any call to a consumer. A recommended [introduction](/concepts/phone#introductions) in European Portuguese for outbound marketing calls:

```text theme={null}
Olá. Fala {agent_name}, um agente de inteligência artificial da {project_name}. Estou a ligar sobre [motivo da chamada], conforme a autorização que nos deu. Esta chamada é gravada. Se não concordar, prima a tecla asterisco a qualquer momento. Se não quiser voltar a receber chamadas nossas, basta dizer-me.
```

For inbound calls:

```text theme={null}
Olá. Fala {agent_name}, um agente de inteligência artificial da {project_name}. Esta chamada é gravada. Se não concordar, prima a tecla asterisco a qualquer momento. Em que posso ajudar?
```

When someone objects to more calls, stop calling them. Use [guidance](/concepts/guidance) to tell the agent how to handle objections, and a [Unitool](/concepts/unitools) to write the objection to your CRM.

## Call recording

You need the consent of the person you record. Under [Código Penal Art. 199.º](https://www.pgdlisboa.pt/leis/lei_mostra_articulado.php?nid=109\&tabela=leis), recording someone's words without consent, even words spoken to you, carries up to one year in prison. [Lei 41/2004 Art. 4.º(3)](https://diariodarepublica.pt/dr/legislacao-consolidada/lei/2004-106523049) permits recordings as proof of a transaction only after you tell the person and they consent. The CNPD [Deliberação 629/2010](https://www.uc.pt/site/assets/files/475840/20100913_deliberacao_629_cnpd_tratamento_dados_gravacao_chamadas.pdf), which predates the GDPR, caps retention at 90 days for transaction proof and 30 days for quality monitoring.

The botBrains introduction announces the recording, and the star key stops the recording and discards it. The transcript stays. No Portuguese source says whether staying on the line counts as consent, or whether a transcript counts as a recording. For marketing calls, ask for a clear yes and mention the transcript. A voice recording is biometric data only when you use it to identify the person ([GDPR Art. 4(14) and Art. 9](https://eur-lex.europa.eu/eli/reg/2016/679/oj)).

## Caller ID and calling hours

We found no Portuguese statute that sets calling hours, a frequency cap, or a special prefix for marketing calls. The person you call sees your botBrains number, and botBrains provides Portuguese numbers on request. botBrains doesn't enforce calling hours, so pick reasonable times yourself. On voicemail, the agent hangs up without a message, which matters because Lei 41/2004 Art. 2(1)(b) treats a stored voice message as electronic mail.

## Sector rules

[Decreto-Lei 24/2014](https://diariodarepublica.pt/dr/legislacao-consolidada/decreto-lei/2014-73222992) covers every consumer contract closed by phone, including energy and telecommunications. Under Art. 5(8), the consumer only becomes bound after signing the offer or sending written consent, unless the consumer made the first call. Under Art. 6(1), you confirm the contract on a durable medium within five days. If you sell energy, credit, insurance, or telecommunications, also check your sector regulator's conduct rules.

## Fines and enforcement

| Authority | Enforces | Maximum |
| - | - | - |
| [CNPD](https://www.cnpd.pt) | Lei 41/2004 Art. 4.º(3), 13.º-A, and 13.º-B | EUR 5 million per offense for companies (Art. 14(1)). GDPR: EUR 20 million or 4% of turnover ([Art. 83](https://eur-lex.europa.eu/eli/reg/2016/679/oj)). |
| ASAE, the economic authority | Decreto-Lei 24/2014 | Serious economic offense (Art. 31(2)) |
| Criminal courts | Código Penal Art. 199.º | One year in prison |

The CNPD received about 4,000 complaints about unsolicited marketing between May 2019 and January 2022 (Diretriz/2022/1, note 1). We found no published Portuguese decision about AI voice agents.

## Sources

* [Lei n.º 41/2004, consolidated](https://diariodarepublica.pt/dr/legislacao-consolidada/lei/2004-106523049), Art. 2, 4, 13.º-A, 13.º-B, 14, and 15
* [Lei n.º 6/99](https://diariodarepublica.pt/dr/detalhe/lei/6-1999-180023), Art. 5 and 7
* [Decreto-Lei n.º 24/2014, consolidated](https://diariodarepublica.pt/dr/legislacao-consolidada/decreto-lei/2014-73222992), Art. 5, 6, 8, and 31
* [Código Penal](https://www.pgdlisboa.pt/leis/lei_mostra_articulado.php?nid=109\&tabela=leis), Art. 199.º
* [CNPD, Diretriz/2022/1 on direct marketing](https://www.cnpd.pt/umbraco/surface/cnpdDecision/download/121958)
* [CNPD, Deliberação 629/2010 on call recording](https://www.uc.pt/site/assets/files/475840/20100913_deliberacao_629_cnpd_tratamento_dados_gravacao_chamadas.pdf), copy hosted by Universidade de Coimbra
* [DGC, list of legal persons](https://www.consumidor.gov.pt/informacao-publicidade/lista-de-pessoas-coletivas-para-nao-rececao-de-comunicacao-nao-solicitadas-marketing-direto)
* [AMD, opposition list for companies](https://www.amd.pt/lista-de-oposicao-empresas) and [for consumers](https://www.amd.pt/lista-de-oposicao-consumidores)
* [GDPR](https://eur-lex.europa.eu/eli/reg/2016/679/oj), Art. 4, 9, 21, and 83
* [Garrigues, on the CNPD direct marketing guidelines](https://www.garrigues.com/en_GB/new/new-guidelines-direct-marketing-issued-portuguese-data-protection-authority-what-has-change-way)

## Next steps

<Columns cols={2}>
  <Card title="Phone integration" icon="phone" href="/concepts/phone">
    Set up your phone line, introductions, and outbound calls.
  </Card>

  <Card title="Calling laws by country" icon="globe" href="/concepts/phone/countries">
    Compare consent rules for AI calls across the EU, the UK, and the US.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.