Authors:
Edna Dias Canedo
1
;
Anderson Jefferson Cerqueira
1
;
Rogério Machado Gravina
2
;
Vanessa Coelho Ribeiro
2
;
Renato Camões
2
;
Vinicius Eloy dos Reis
2
;
Fábio Lúcio Lopes Mendonça
3
and
Rafael T. de Sousa Jr.
3
Affiliations:
1
Department of Computer Science, University of Brasília (UnB), Brasília, DF, Brazil
;
2
General Coordination of Information Technology (CGTI), Administrative Council for Economic Defense (CADE), Brasília, DF, Brazil
;
3
National Science and Technology Institute on Cyber Security, Electrical Engineering Department (ENE), University of Brasília (UnB), Brasília, DF, Brazil
Keyword(s):
Brazilian General Data Protection Law, Business Process Modeling Notation, Data Privacy Brazilian Federal Public Administration, Data Protection Laws.
Abstract:
The increasing number of online users yields to a correlated increase in the number of varied personal data collection devices. As a result, it became necessary to create and regulate new personal data policies which define the rights and duties of public and private organizations and users. As occurred in other countries, the Brazilian General Data Protection Law (LGPD) was created to define the nationwide rules regarding the privacy of users’ data. In this paper, we present the proposal for a LGPD implementation process, using the Business Process Modeling Notation (BPMN). This proposal is intended to allow the Brazilian Federal Public Administration (FPA) Agencies to perform the steps to implement the LGPD in an easier and more targeted way, resulting in increased privacy of personal data. The proposal also defines new roles and responsibilities within FPA Agencies to enable these Agencies for providing clarifications to complaints about personal data, receiving communications fro
m the National Data Protection Authority (ANPD) and adopting measures, guiding employees in relation to rules, regulations and data protection laws.
(More)