The Portugal government has introduced a detailed liability framework for autonomous vehicle testing on public roads, essentially shifting legal exposure based on whether the failure is human, corporate, or mechanical. The decree-law, which takes effect in July 2026, assigns fault across four distinct tiers depending on who—or what—broke the rules.
Why This Matters
• Test operators must know their exposure: Drivers behind the wheel during trials face personal fines unless they can prove the testing entity was contractually responsible.
• Insurance costs will rise: Policies must now carry four times the standard civil liability coverage to account for autonomous systems on real streets.
• Zero public trials announced yet: Despite the regulation being live, no company has publicly declared plans to test autonomous cars in Portugal.
How Liability Is Divided
Portugal's Decree-Law 113/2026, published 8 June in the official gazette, allocates responsibility for traffic violations across a cascading system. The Instituto da Mobilidade e dos Transportes (IMT) will enforce the regime starting next month, and the specificity of the rules reveals how much legal uncertainty still surrounds who pays when software fails.
Human operators aboard the vehicle are liable if they violate basic driver duties: failing to obey traffic signals, allowing the car to operate unsafely, or exceeding the maximum three-hour shift limit without the mandatory one-hour break. Operators must also summon police immediately after serious incidents; delay triggers personal liability.
However, the law grants a critical escape clause. A notified driver can transfer liability to the testing sponsor by proving a contractual relationship with the entity running the trial. This provision recognizes that many on-road operators are employees or contractors, not decision-makers.
License holders—typically the testing company—face exposure for structural compliance failures: operating without a human supervisor on board, tampering with system performance after certification, lacking adequate insurance, or running tests with a suspended permit. They are also liable if they fail to provide the operator with proper documentation or miss mandatory reporting deadlines to the IMT.
Vehicle registration holders answer for infractions tied to the licensing prerequisites outlined in Article 5 of the regulation, which governs technical eligibility and initial authorization.
Testing sponsors—the firms or institutions conducting the trials—are held accountable for procedural breaches under Article 21. These include failing to notify the IMT and Portugal security forces at least 15 days before a trial begins, or not submitting a final report after the test concludes. This layer of liability aims to prevent stealth testing or data withholding.
What This Means for Residents
For the moment, the impact on daily life is minimal. No automaker, research lab, or university has announced a public-road trial schedule in Portugal, so the risk of encountering an autonomous test vehicle remains theoretical. But the framework matters for three groups:
Insurers and fleet owners must now budget for dramatically higher premiums. The quadrupled liability cap reflects the state's view that autonomous systems introduce greater third-party risk, at least during the experimental phase. Fleet managers evaluating pilot programs should model this cost increase into feasibility studies.
Tech workers and test drivers employed by future sponsors should scrutinize their contracts. The law's liability-shifting mechanism means a driver can escape fines only if the employment agreement explicitly places responsibility on the sponsor. Ambiguous contracts could leave individuals exposed.
Local authorities and traffic police now have a detailed checklist for assigning fault. Unlike conventional crashes, where driver error dominates, autonomous incidents may involve multiple parties—software provider, vehicle owner, test sponsor, and human operator—all pointing fingers. The decree attempts to preempt litigation gridlock by defining zones of responsibility upfront.
Strict Rules for Human Oversight
Portugal chose not to permit fully driverless trials under this initial framework. Even vehicles classified as Level 4 (high automation within a defined operational zone) or Level 5 (total automation without domain restrictions) must have either a human occupant or a remote operator capable of taking control.
Drivers must hold a license for at least six years, possess a clean record (no criminal convictions or serious traffic violations in the past five years), and observe blood alcohol limits between 0.2 and 0.5 g/l—stricter than the standard 0.5 g/l threshold for regular motorists. Test vehicles may not exceed the posted speed limit minus 20 km/h, creating a buffer that reduces collision severity if automation fails.
Continuous data logging is mandatory: speed, acceleration, GPS position, system commands, and every human intervention must be recorded. In the event of a serious crash, sponsors have less than 24 hours to notify authorities, and detailed incident reports flow to the IMT after each test session or monthly if trials run longer.
European Context and Unresolved Questions
Portugal's approach aligns with emerging EU directives on AI liability and product safety. The revised Product Liability Directive (EU 2024/2853), which member states must transpose by December 2026, treats defective software as a product defect, opening the door for claimants to sue manufacturers directly if faulty code causes harm.
Yet the decree leaves one question unanswered: when an autonomous system makes a legally compliant but ethically controversial decision—such as swerving to minimize casualties—who bears moral and financial responsibility? The law assigns technical fault but does not adjudicate algorithmic choices, a gap likely to surface once real-world incidents occur.
Some European automakers, including Volvo in earlier statements and BYD in China (with potential EU extension), have volunteered to assume full liability when their systems are in control and used within design parameters. Portugal's decree does not mandate such blanket responsibility, instead distributing exposure across actors.
France will require event data recorders (essentially black boxes for cars) starting in 2025, and Germany already mandates them. Portugal's regulation implicitly achieves the same outcome through continuous logging requirements, though it does not specify tamper-proof hardware standards.
What Happens Next
The IMT will begin accepting applications for testing licenses in July. Prospective sponsors must submit technical documentation, safety plans, proof of enhanced insurance, and driver credentials. The agency has not disclosed processing timelines or fee structures, but the 15-day advance notice rule suggests a rolling approval system rather than batch authorizations.
Industry observers expect the first applicants to be university research groups rather than commercial automakers, given Portugal's relatively small domestic market and the administrative burden of multi-country trials across the EU. Lisbon and Porto, with their mix of urban density and highway corridors, are the likeliest test sites.
For residents, the immediate takeaway is procedural rather than practical: if you witness a vehicle with conspicuous test markings operating erratically, the Portugal Royal Police (Polícia de Segurança Pública) and the IMT are the contact points. The law obligates sponsors to mark test vehicles clearly, though specific signage standards were not detailed in the decree.
The regulation represents Portugal's bid to position itself as a European testbed for autonomous mobility without sacrificing public safety or legal clarity. Whether that balance holds will depend on how sponsors, insurers, and courts interpret the liability tiers once the first incidents occur.
