Skip to main content
iBlow logo
iBlow Logo
  • About
  • Services
  • Features & Packages
  • Resources
  • Contact
  • FAQ
  • Request a demo
  • EnglishEnglish
    • PortuguêsPortuguês
  • About
  • Service
  • Features & Packages
  • Resources
  • Contact
  • FAQ
iBlow logo
  • About
  • Services
  • Features & Packages
  • Resources
  • Contact
  • FAQ
  • Request a demo
  • EnglishEnglish
    • PortuguêsPortuguês

MENAC and the New Legal Obligation of the RGPC: What Do Companies Need to Know by 14 February?

MENAC and the new legal obligation of the RGPC: what companies need to know by 14 February - iBlow

MENAC, National Anti-Corruption Mechanism, has been implementing significant measures to fight corruption in Portugal.

With the entry into force of the General Regime for the Prevention of Corruption (RGPC), a set of obligations was established for public and private organisations, with the aim of strengthening integrity, transparency and accountability in their operations.

This article details the main requirements of the RGPC, the deadlines to be met and the steps necessary for companies with 50 or more employees to be compliant.

What is the RGPC?

The RGPC is a legal regime that defines mandatory measures to prevent corruption and related offences in public and private sector organisations.

It is part of a broader anti-corruption strategy led by MENAC, whose mission is to ensure compliance with these measures, supervise the entities covered and promote good governance practices.

Who does it apply to?

The RGPC applies to:

  • Public organisations;
  • Private organisations with 50 or more employees;
  • Other organisations which, regardless of the number of employees, carry out activities of relevant public interest.

These organisations are obliged to implement a Regulatory Compliance Programme, which includes a set of measures and procedures designed to prevent, detect and mitigate corruption risks.

Main obligations of the RGPC

Companies covered by the RGPC must implement the following measures:

1. Plan for the Prevention of Risks of Corruption and Related Offences (PPR)

  • Identifies the corruption risks associated with the organisation’s activity;
  • Defines measures to prevent and control these risks;
  • It must be updated periodically, taking into account changes in the organisation’s activities or context.

2. Code of Conduct

  • Establishes the principles of ethics and conduct to be followed by all employees;
  • It must be widely disseminated within the organisation and integrated into the corporate culture.

3. Internal Training Programme

  • Aims to train employees to identify and prevent situations of corruption;
  • It should include regular training sessions adapted to the roles and responsibilities of each group of employees.

4. Whistleblowing Channel

  • An internal system for reporting suspicions of corruption or related offences;
  • It must guarantee confidentiality and protect whistleblowers against reprisals.

5. Appointment of a Compliance Officer

  • This professional will be the point of contact between the organisation and MENAC;
  • They will be responsible for ensuring compliance with legal obligations and coordinating the implementation of RGPC measures.

RGPC Platform

To facilitate compliance, MENAC launched the RGPC Platform, which went live on 25 November 2024. On this platform, the entities covered must:

  • Register and create a profile;
  • Submit the required documents, including the PPR, the Code of Conduct and other elements of the Regulatory Compliance Programme;
  • Regularly update the information and documents.

Deadlines and penalties

Initially, the deadline for submitting the documents was 31 December 2024.

However, due to the high volume of registrations and requests for clarification, MENAC extended the deadline to 14 February 2025.

Failure to fulfil these obligations may result in:

  • Administrative sanctions, including fines;
  • Reputational consequences, which could compromise the organisation’s credibility with clients, partners and investors;
  • Legal impediments, such as exclusion from public tenders or the inability to enter into contracts with public organisations.

How to prepare your organisation

1. Carry out an internal diagnosis

  • Evaluate existing processes and systems to identify gaps in RGPC compliance.

2. Define responsibilities

  • Appoint a Compliance Officer and form a team dedicated to implementing the required measures.

3. Draw up the necessary documents

  • Develop or update the PPR, Code of Conduct and other required documents.

4. Implement training and communication systems

  • Create a training plan for employees and ensure that everyone understands the new policies and procedures.

5. Establish a whistleblowing channel

  • Make sure the system complies with legal requirements and is easy for employees to use.

6. Register on the RGPC Platform

  • Submit all your documents and keep your information up to date.

Resources and support

MENAC provides various resources to support organisations, including:

  • A user manual for the RGPC Platform;
  • A frequently asked questions (FAQs) section on its official website;
  • Email support at [email protected].

Conclusion

The implementation of the RGPC represents an important step in the prevention of corruption in Portugal.

Companies with 50 or more employees must act quickly to comply with legal obligations by 14 February 2025, ensuring not only compliance with the law, but also promoting a culture of integrity and transparency.

Investing in good governance practices is essential for strengthening the trust of customers, employees and partners and for ensuring the long-term sustainable success of organisations.

See more details at: https://mec-anticorrupcao.pt/plataforma-rgpc-entra-em-funcionamento/

Be part of the conversation that is shaping the future of work! Book a meeting!

See other articles that may be of interest to you.

We hope you enjoyed this article.

Thank you!

Constantino Ferreira

iBlow.eu

MENAC: further reading

To go deeper on MENAC, see also:

  • What are the key aspects of the EU Whistleblower Protection Directive that we need to know?
  • What steps should companies take to ensure compliance with the directive, and what are the most common challenges they face?
  • Internal reporting channel and why companies need one!

Official source: Directive (EU) 2019/1937.

Make compliance a confident part of how you grow.

Tell us what your organisation needs. We’ll help you find the right next step.
Talk to our team
Stylized text with abstract design
Secure reporting and practical compliance support for organisations that want to build trust and act with confidence.

Explore

About iBlow
Services
Features & packages
Resources
Law 93/2021 in 9 points
FAQs

Choose your next step

Book a demonstration
Request a proposal
Get the practical guide
Request a free trial

Contact

+351 210 987 308
[email protected]
Rua Mouzinho da Silveira 32
Lisboa, Portugal

Privacy policy · Terms · Cookies
© 2026 iBlow Europe. All rights reserved.
iBlow Europe
Manage Consent

To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.

Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
O armazenamento ou acesso técnico é necessário para criar perfis de utilizador para enviar publicidade, ou para localizar o utilizador num site ou em vários sites para fins de marketing semelhantes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}