Portugal Faces New EU Cyberbullying Laws: What Online Safety Means for Your Family

The European Parliament has urged EU member states to harmonize criminal penalties for cyberbullying and compel digital platforms to remove abusive content immediately, ending the current legal patchwork across the bloc that leaves victims vulnerable to prolonged online harassment.

Why This Matters

• Criminal sanctions standardized: All 27 member states must now impose effective, dissuasive penalties for online harassment under a resolution passed April 30, 2026.

• Platform liability strengthened: Tech companies face stricter obligations to pull down harmful material swiftly or face consequences.

• New reporting tool coming: An EU-wide confidential app for victims to document evidence and access national helplines is in development.

• Hate crimes may become EU-level offenses: Parliament is pushing to classify severe cyberbullying as cross-border EU crime.

The Legal Gap Portugal Now Must Fill

The resolution, adopted by show of hands in Strasbourg, responds to a European Commission Action Plan released in February that revealed 17% of adolescents across the EU suffer online harassment, while 13% admit participating in such behavior. For residents of Portugal, this means the national government will need to evaluate its current penal code and potentially introduce new statutes that align with the harmonized EU framework.

Currently, Portugal's legal approach to cyberbullying relies on general provisions within the Penal Code covering threats, defamation, and harassment. There is no standalone cyberbullying statute, meaning prosecutors often struggle to secure convictions when abuse occurs across multiple digital platforms or involves minors who delete evidence quickly. The European Parliament's demand for a unified EU definition of cyberbullying and recognition as a transnational offense would require Portugal's legislative assembly to draft specific language criminalizing digital harassment distinct from traditional stalking or libel.

The resolution also urges member states to add hate crimes to the EU's list of recognized offenses, a move that would capture the most severe instances of targeted online abuse—particularly those based on race, religion, gender, or sexual orientation. For Portugal's immigrant communities and LGBTQ+ residents, this provision could translate into stronger legal recourse when harassment escalates to coordinated hate campaigns.

Ireland's "Coco's Law" as Blueprint

The parliamentary text draws direct inspiration from Ireland's Harassment, Harmful Communications and Related Offences Act 2020, colloquially known as "Coco's Law" after teenager Nicole "Coco" Fox Fenlon, who died by suicide following relentless cyberbullying and the non-consensual sharing of intimate images. Her mother, Jackie Fox, testified before the European Parliament, recounting how existing Irish law failed to protect her daughter or hold perpetrators accountable.

Enacted in 2021, Coco's Law criminalizes the distribution or threat of distribution of intimate images without consent, carrying penalties of up to 7 years imprisonment and unlimited fines. An operational review published in September 2024 described initial indicators as "positive": public awareness that sharing intimate images without consent is illegal jumped from 69% in August 2021 to 97% in November 2023. The Irish national hotline, Hotline.ie, processed 1,791 reports between September 2021 and December 2023, achieving a 92% removal rate for publicly accessible abusive material. Prosecutions climbed from 22 in 2021 to 113 in 2023, showing a significant upward trend in enforcement.

For Portugal, the Irish model offers a roadmap: specific criminal language, dedicated reporting infrastructure, and public education campaigns that drive cultural change alongside enforcement.

What This Means for Residents

If you live in Portugal and have children in school, expect mandatory digital literacy programs as part of the implementation. The resolution explicitly calls for prevention strategies targeting children, parents, and educators, reinforcing safe online behavior before harm occurs. Schools across Portugal will likely need to integrate cyberbullying awareness into their curricula, mirroring initiatives already underway in France—where bullying linked to suicide now carries up to 10 years imprisonment and €150,000 fines—and the Netherlands, where a new Free and Safe Education Act requires schools to report serious incidents to inspectors.

For adults, the practical impact centers on platform accountability. The resolution criticizes business models that incentivize hate-driven engagement and hyper-personalized recommendation algorithms that amplify abusive content. Under the Digital Services Act (DSA), already in force across the EU, very large online platforms must conduct annual risk assessments addressing illegal content dissemination and impacts on fundamental rights, including gender-based violence. The Parliament's new resolution tightens this further, demanding immediate takedown mechanisms rather than the multi-day review windows platforms often exploit.

The AI Act, which entered into application in stages throughout 2024 and 2025, adds another layer: providers of AI systems must comply with labeling and transparency rules to ensure users know when they're interacting with synthetic content. The Parliament's resolution underscores that deepfakes and AI-generated harassment materials must be flagged clearly, and platforms must prevent their viral spread. For Portugal residents using social media, this means clearer disclosure when images or videos have been manipulated, reducing the risk of reputation damage from fabricated material.

Enforcement Challenges and National Divergence

Despite the harmonization push, implementation timelines remain undefined. The European Commission must now assess whether a single EU-wide definition of cyberbullying is feasible and whether member states will accept it as a cross-border crime subject to mutual recognition of judicial decisions. Portugal's judicial system would need to coordinate with counterparts in Spain, France, or Germany when a cyberbullying case involves perpetrators in multiple jurisdictions—a common scenario on platforms like Instagram or TikTok where users span borders.

Malta is currently debating legislation that would impose 1 to 5 years imprisonment for cyberstalking, with enhanced penalties if victims are minors. France, meanwhile, has gone further by approving a ban on social media use for anyone under 15, scheduled to take effect in September 2026, aiming to cut off access at the source. The United Kingdom, no longer bound by EU directives, relies on its Online Safety Act 2023, which introduced offenses like "cyber-flashing"—already resulting in convictions as of March 2024.

For Portugal, the question is whether to adopt a French-style preventive approach by restricting minors' access, an Irish-style criminal framework with severe penalties, or a hybrid model that balances enforcement with education. The Portugal Ministry of Justice has not yet announced a legislative timeline, but pressure from Brussels will likely accelerate the process.

Platform Responsibility Under Scrutiny

The resolution's harshest language targets digital platforms themselves. Lawmakers argue that current DSA provisions—while comprehensive—are insufficiently enforced, allowing illegal content to remain online for days or weeks while companies review reports. The new resolution demands immediate removal of clearly abusive material, particularly intimate images shared without consent or threats of violence.

For Portugal-based users, this means faster recourse when filing complaints. Platforms will face heightened scrutiny from national regulators, including the Portugal National Communications Authority (ANACOM) and the Commission for Citizenship and Gender Equality, which handle digital safety complaints. Fines for non-compliance under the DSA can reach 6% of global annual turnover, a penalty substantial enough to compel even the largest tech giants to invest in moderation infrastructure.

The resolution also calls for increased funding for victim support organizations and integration of cyberbullying prevention into national mental health strategies. Portugal's National Health Service may need to expand psychological support services specifically for online harassment victims, particularly adolescents, who report the highest rates of distress.

Next Steps and Timeline

The European Commission is expected to respond within six months, outlining whether it will propose a directive or regulation to codify the Parliament's demands. Member states, including Portugal, would then have 18 to 24 months to transpose the legislation into national law, depending on the chosen legal instrument.

In the interim, the Commission's February 2026 Action Plan remains the operational framework: stricter DSA enforcement, support for AI Act implementation to combat deepfakes, and development of the EU-wide reporting app for victims to document abuse and store evidence securely. The app, slated for launch in late 2026 or early 2027, will allow users across Portugal and the entire bloc to file complaints with a single interface, routing them to the appropriate national authority.

What Advocates Are Saying

Jackie Fox's testimony catalyzed the resolution, but child safety organizations across Europe have amplified the call. Hotline.ie, Ireland's reporting portal, logged nearly 1,500 cases of intimate image abuse in just over two years, underscoring the scale of the problem. In Malta, the Foundation for Social Welfare Services recorded approximately 900 online abuse cases in a single year, prompting the government's legislative push.

For Portugal, where social media penetration among teens exceeds 90%, the stakes are high. Youth advocacy groups have long criticized the absence of a dedicated legal framework, forcing victims to navigate generic harassment statutes that predate the digital era. The EU resolution, if implemented robustly, could finally close that gap.

The Parliamentary resolution does not create binding law on its own—it is a political signal demanding action. But with hate crimes potentially elevated to EU-level offenses, platforms under stricter liability, and member states compelled to harmonize penalties, the trajectory is clear: online harassment will no longer be treated as a lesser crime than its offline counterpart, and victims across Portugal will have stronger legal tools to fight back.