Countries
The Compliance Officer function, country by country, across the nine member states of the Community of Portuguese-Speaking Countries. Each country has a dedicated page, with the specificities of exercising the function and a tailored service proposal.
Portugal
A mature framework, aligned with the European Union
Brasil
The integrity programme at the heart of the function
Angola
Compliance driven by banking and the extractive sector
Cabo Verde
African pioneer in data protection
Moçambique
A focus on money-laundering prevention, through GIFIM
Guiné-Bissau
A framework in force, with regional cooperation
São Tomé e Príncipe
Signatory of the Lusophone Data Protection Network
Timor-Leste
A developing legal system, with a focus on capacity-building
Guiné Equatorial
CPLP member, with an emerging regulatory framework
Main instruments
| Country | Main instruments | Authority |
|---|---|---|
| Portugal | GDPR and Law 58/2019; Law 93/2021 (whistleblowing); Anti-Corruption Regime DL 109-E/2021; Law 83/2017 (AML) | CNPD |
| Brasil | LGPD, Law 13.709/2018; Anti-Corruption Law 12.846/2013; Money-Laundering Law 9.613/1998 | ANPD |
| Angola | Law 22/11 (Personal Data Protection); money-laundering and public-probity regimes | APD |
| Cabo Verde | Law 133/V/2001 (first African country to legislate), amended in 2013 and 2021; sectoral regimes | CNPD |
| Moçambique | Framework under development; sectoral privacy and AML provisions | — |
| Guiné-Bissau | Emerging framework; regional mechanisms (UEMOA/GIABA) on money laundering | — |
| São Tomé e Príncipe | Signatory of the Lusophone Data Protection Network (2024); framework under development | — |
| Timor-Leste | Emerging framework; sectoral provisions and international commitments | — |
| Guiné Equatorial | CPLP member; emerging regulatory framework | — |
More information
Countries without a consolidated general law usually have sectoral provisions and commitments within the CPLP framework.