Portugal Law No. 58/2019 - Data Protection Implementation Act 16: Article 16 Children's consent at 13

Where consent is the basis for offering information society services directly to a child, a child's data may be processed on the child's own consent only from 13 years of age; below 13, processing is lawful only if the legal representatives consent, preferably through secure authentication.