Estratégias para Modelagem e Avaliação da Conformidade entre Sistemas de Informação e a Lei Geral de Proteção de Dados Pessoais - LGPD

Abstract

The General Law for the Protection of Personal Data (LGPD) determines how the processing of personal data should be carried out, including in digital media, whether by a legal entity or an individual with public or private law. Thus, the law seeks to protect the fundamental rights of freedom and privacy. The LGPD determines how the treatment, storage and disposal of personal data should be carried out, subject to prior authorization from the grantor. Information systems, in turn, are strongly based on the acquisition, storage and processing of data. Therefore, these systems need to be GDPR (General Data Protection Regulation) compliant. Logically, the LGPD has a great impact on the development of information systems, which must now handle personal data in the manner stipulated by law. In this context, this short course aims to present the main strategies for modeling and assessing compliance between information systems and the LGPD.