Data privacy policy: relevant observations for its implementation

Abstract

The protection of personal data has been discussed worldwide. This topic arises from a digital economy driven by globalization and the advancement of technologies, making it necessary to guarantee the rights of its holders in the decision on what can be done with their data and information. In this way, the General Data Protection Law was created to protect the fundamental rights of freedom and privacy. Given this, the challenge arises for organizations to adapt to meet legal requirements when it comes to data privacy policies. In this context, the present work aims to analyze the main elements that must be considered in implementing a data privacy policy. Through a bibliographic and documentary survey, we seek to discuss data privacy policies and their characteristics, examining the main aspects that characterize privacy and the protection of personal data in Brazil. The results reveal criteria to be met by the Personal Data Privacy Policy, outlining the main elements of a data privacy policy to comply with the law. We concluded that the policy must meet standards established by legislation, but considering the nature of the business.