Portugal

Criminal Information Law of August 17, 1991

Chapter 1 Article 7:
1 - Any person who, without authorization obtains for himself or another person an unlawful gain or use by any manner accessing an information system or network, shall be sentenced to imprisonment not exceeding one year, or to a fine and imprisonment not exceeding 120 days.
2 - Imprisonment not exceeding three years or a fine if the person concerned obtains access to information by breaking the security rules.
3 - Imprisonment for a term of one year not exceeding five years when:
(a) the person concerned by obtaining access to information acquires knowledge of trade secrets or confidential data protected by law,
(b) the gain or use results in comprehensive values.