Abstract
Brazilian organizations must comply with the Brazilian General Data Protection Law (LGPD) and this need must be carried out in harmony with legacy systems and in the new systems developed and used by organizations. In this article we present an overview of the LGPD implementation process by public and private organizations in Brazil. We conducted a literature review and a survey with Information and Communication Technology (ICT) professionals to investigate and understand how organizations are adapting to LGPD. The results show that more than 46% of the organizations have a Data Protection Officer (DPO) and only 54% of the data holders have free access to the duration and form that their data is being treated, being able to consult this information for free and facilitated. However, 59% of the participants stated that the sharing of personal data stored by the organization is carried out only with partners of the organization, in accordance with the LGPD and when strictly necessary and 51% stated that the organization performs the logging of all accesses to the personal data. In addition, 96.7% of organizations have already suffered some sanction / notification from the National Data Protection Agency (ANPD). According to our findings, we can conclude that Brazilian organizations are not yet in full compliance with the LGPD.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Erickson, A.: Comparative analysis of the eu’s gdpr and brazil’s lgpd: enforcement challenges with the lgpd. Brook. J. Int. L. 44, 859 (2018)
European Union. General data protection regulation (gdpr). Intersoft Consult. 1(1), 1–100 (2018). Accessed 24 Oct 2020
Australian Government Federal Register of Legislation. Privacy act (1988) https://www.legislation.gov.au/details/c2021c00139, Accessed 4 Apr 2021
Code Section Group: California consumer privacy act of 2018. Accessed 14 2021
Ribeiro, R.C., Canedo, E.D.: Using mcda for selecting criteria of lgpd compliant personal data security. In: The 21st Annual International Conference on Digital Government Research, dg.o ’20, New York, NY, USA, pp. 175–184. Association for Computing Machinery (2020). https://doi.org/10.1145/3396956.3398252
Ministério da Economia. Comercio exterior brasileiro, https://www.gov.br/produtividade-e-comercio-exterior/pt-br/assuntos/comercio-exterior/estatisticas, Accessed 30 Mar 2021
Ribeiro, R.C., Canedo, E.D.: Using MCDA for selecting criteria of LGPD compliant personal data security. In: Eom, S.J., Lee, J. (eds.) dg.o ’20: The 21st Annual International Conference on Digital Government Research, Seoul, Republic of Korea, 15–19 June 2020, pp. 175–184. ACM (2020)
Presidência da República. Lei Geral de Proteção de Dados (2018). http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/L13709.htm, Accessed 22 Mar 2021
Governo Federal. Guia de boas práticas para implementação na administração pública federal (2020). https://www.gov.br/governodigital/pt-br/governanca-de-dados/guia-lgpd.pdf, Accessed 20 Mar 2021
Serpro. Governo federal lança plataforma lgpd educacional. Serpro (2021)
Serpro. Pesquisa indica que 64% das empresas não estão em conformidade com a lgpd. InfoMoney (2020)
Pereira Neto Macedo. Brazilian general data protection law (lgpd). Braz. Natl. 1(1), 1–16 (2018). Accessed 18 Oct 2020
Khyara Passos. Compliance with brazil’s new data privacy legislation: What u.s. companies need to know. SSRN (2021)
Alencar, A.D.S.: ProteÇÃo de dados pessoais no brasil e no chile: Uma anÁlise comparativa sob a perspectiva da decisÃo de adequaÇÃo da comissÃo europeia. Observatório da LGPD, pp. 1 (2020)
Cantelle, A.: Marco civil da internet e proteção de dados pessoais 2017. conteúdo Jurídico, p. 1 (2020)
Machado, R., Kreutz, D., Paz, G., Rodrigues, G.: Vazamentos de dados: Histórico, impacto socioeconômico e as novas leis de proteçãoo de dados. Anais da Escola Regional de Redes de Computadores (ERRC) (2019)
Ferreira De Jesus, A.P., et al.: Robôde conversação baseado em inteligência artificial para treinamento na lei geral de proteção de dados pessoais. Unisanta Science and Technology, pp. 1–10 (2020)
de Souza Lehfeld, L., Celiot, A., Siqueira, O.N., Barufi, R.B.: A (hiper)vulnerabilidade do consumidor no ciberespaço e as perspectivas da lgpd. In: Revista Eletrônica Pesquiseduca, p. 10 (2021)
Ferrão, S.R., Carvalho, A., Canedo, E.D., Costa, M.P., Cerqueira, A.: Diagnostic of data processing by brazilian organizations-a low compliance issue. Academic Editor Willy Susilo (2021)
Canedo, E.D., Calazans, A., Masson, E., Costa, P., Lima, F.: Perceptions of ict practitioners regarding software privacy. Entropy 22, 429 (2020)
Allen, I.E., Seaman, C.A.: Likert scales and data analyses (2007)
Acknowledgments
The authors would like to thank the support of the Brazilian research, development and innovation agencies CAPES (grants 23038.007604/2014-69 FORTE and 88887.144009/2017-00 PROBRAL), CNPq (grants 312180/2019-5 PQ-2, BRICS2017-591 LargEWiN, and 465741/2014-2 INCT in Cybersecurity) and FAP-DF (grants 0193.001366/2016 UIoT and 0193.001365/2016 SSDDC), as well as the cooperation projects with the Ministry of the Economy (grants DIPLA 005/2016 and ENAP 083/2016), the Institutional Security Office of the Presidency of the Republic (grant ABIN 002/2017), the Administrative Council for Economic Defense (grant CADE 08700.000047/2019-14), and the General Attorney of the Union (grant AGU 697.935/2019).
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 Springer Nature Switzerland AG
About this paper
Cite this paper
Canedo, E.D. et al. (2021). Challenges Regarding the Compliance with the General Data Protection Law by Brazilian Organizations: A Survey. In: Gervasi, O., et al. Computational Science and Its Applications – ICCSA 2021. ICCSA 2021. Lecture Notes in Computer Science(), vol 12951. Springer, Cham. https://doi.org/10.1007/978-3-030-86970-0_31
Download citation
DOI: https://doi.org/10.1007/978-3-030-86970-0_31
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-86969-4
Online ISBN: 978-3-030-86970-0
eBook Packages: Computer ScienceComputer Science (R0)