Proposal of an Implementation Process for the Brazilian General Data Protection Law (LGPD)

Edna Canedo, Anderson Cerqueira, Rogério Gravina, Vanessa Ribeiro, Renato Camões, Vinicius Reis, Fábio Mendonça, Rafael Sousa Jr.

2021

Abstract

The increasing number of online users yields to a correlated increase in the number of varied personal data collection devices. As a result, it became necessary to create and regulate new personal data policies which define the rights and duties of public and private organizations and users. As occurred in other countries, the Brazilian General Data Protection Law (LGPD) was created to define the nationwide rules regarding the privacy of users’ data. In this paper, we present the proposal for a LGPD implementation process, using the Business Process Modeling Notation (BPMN). This proposal is intended to allow the Brazilian Federal Public Administration (FPA) Agencies to perform the steps to implement the LGPD in an easier and more targeted way, resulting in increased privacy of personal data. The proposal also defines new roles and responsibilities within FPA Agencies to enable these Agencies for providing clarifications to complaints about personal data, receiving communications from the National Data Protection Authority (ANPD) and adopting measures, guiding employees in relation to rules, regulations and data protection laws.

Paper Citation

in Harvard Style

Canedo E., Cerqueira A., Gravina R., Ribeiro V., Camões R., Reis V., Mendonça F. and Sousa Jr. R. (2021). Proposal of an Implementation Process for the Brazilian General Data Protection Law (LGPD). In Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 1: ICEIS, ISBN 978-989-758-509-8, pages 19-30. DOI: 10.5220/0010398200190030

in Bibtex Style

@conference{iceis21,
author={Edna Canedo and Anderson Cerqueira and Rogério Gravina and Vanessa Ribeiro and Renato Camões and Vinicius Reis and Fábio Mendonça and Rafael Sousa Jr.},
title={Proposal of an Implementation Process for the Brazilian General Data Protection Law (LGPD)},
booktitle={Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 1: ICEIS,},
year={2021},
pages={19-30},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010398200190030},
isbn={978-989-758-509-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 1: ICEIS,
TI - Proposal of an Implementation Process for the Brazilian General Data Protection Law (LGPD)
SN - 978-989-758-509-8
AU - Canedo E.
AU - Cerqueira A.
AU - Gravina R.
AU - Ribeiro V.
AU - Camões R.
AU - Reis V.
AU - Mendonça F.
AU - Sousa Jr. R.
PY - 2021
SP - 19
EP - 30
DO - 10.5220/0010398200190030