Considering the intensification in the use of personal data in remote in-person environments, as well as the concern with data protection, this basic applied research aims to verify, according to the normative instruments for data protection adopted in a public technological education institution, the current challenges for the development of policies and procedures from Brazilian General Data Protection Law -GDPR. Therefore, the case study is conducted through the application of structured questionnaires to professors and managers, whose answers will be collected, tabulated and statistically treated, so that the analytical criteria of interpretation will allow the analysis of quantitative information and adequate scientific basis. The results obtained will be discussed from the records and the observations resulting from the analysis of the information collected during the research.