LGPD in practice and its challenges in Process Management

[ishanijerin1]

The increase in cases of data leaks in recent years has led governments, organizations and society to become concerned about developing mechanisms to ensure that privacy is no longer invaded.

Faced with this problem, the General Data australia accountant email database Protection Law (LGPD) was created to create rules, aiming at legal security for a society increasingly driven by data.

Implementing the LGPD requires technical and legal knowledge and good management practices.

Read on to find out more!

The LGPD
The General Data Protection Law (LGPD) is legislation that aims to protect the freedom and privacy of consumers and citizens.

Created in 2018 here in Brazil and in force since 09/18/2020, with sanctions being applied since August 2021, the rules are established for any use, collection, storage and sharing of user data by public and private companies.

The main objective is to ensure greater security, privacy and transparency in the use of personal information, which causes significant impacts on the legal, administrative and information security areas of companies.

Who does the LGPD apply to?
The LGPD applies to any person, whether an individual, a public or private legal entity, who processes personal data, that is, carries out activities in which personal data is used (collection, storage, sharing and deletion), whether in digital media or not.

Personal data
Personal data is all data that contains personally identifiable information, directly or indirectly, such as first and last name, marital status, CPF, RG, address, GPS data, electronic identifiers and consumption habits.

Sensitive personal data such as religion, race, sexuality and political opinion also apply.

LGPD in practice
Companies in general, whether SMEs (Small and Medium Enterprises) or large, are required to meet the requirements of the LGPD.

One of the changes, declared as the most important, relates to the express consent of customers for the use of their information.

In this sense, companies and their campaigns need to make it clear what use that information will be given.

It will often be necessary to change the company's customs regarding the management of files and data, and also regarding the hiring of specialists and investment in information security.

And that's where, in short, process management comes in.