A política da segurança da informação e nova LGPD

Abstract

The present study aims to encourage reflection on the information privacy policy and the General Data Protection Law or LGPD, which came into force from the second half of 2020 and prioritizes compliance according to its severity. Thus, the objective of this study is to show how this law affects the day to day of companies. Consequently, the problem proposed for this study is based on the following question: What is the importance of the information security policy and the new General Data Protection Law in organizations? From the above, the general objective of this research sought to address the importance of the General Law for the Protection of Personal Data. In methodological terms, the work was developed based on bibliographic research, articles and books on LGPD and information security topics, based on periodicals, newspapers, magazines and publications. The investigation material was the result of search and studies of elements found in reference books and academic articles. Therefore, referring to the descriptors used, the study used the following keywords to carry out the search: security, information and new LGPD, General Law for the Protection of Personal Data. With regard to the period of published articles and works, a period of 10 years was established for delimitation, and the renowned authors of the area were not defined in a specific period. Amidst the main considerations filed with the investigation, it is possible to warn that the purpose of the LGPD is not to abolish any type of market, but only to restrict abusive practices. So, if the business is subject to data sharing, it is essential for companies to move forward by adjusting, adapting to the data protection policy, as required by law, it is important to collect the customer's consent, after all, no customer would like to having your data invaded and shared inappropriately. Keywords: information security; lgpd; information technology; data; consent management.