What is LGPD and how does it affect my company's communication?

nilakter

As mentioned earlier, the acronym LGPD stands for General Law for the Protection of Personal Data. This law is based on several values, such as respect for privacy; to informative self-determination; freedom of expression, information, communication and opinion; to the inviolability of intimacy, honor and image; economic and technological development and innovation; to free initiative, free competition and consumer protection and human rights, freedom and dignity of people. Its text determines that all personal data (information related to an identified or identifiable natural person, such as name, age, marital status, documents) can only be received with the user's authorization. The intention of the law is to guarantee the user more privacy and control over their data. In addition to the purpose of preventing misuse by third parties. The law also serves to explain when a company can process personal data.

That is, when it can store, process and transfer this data. Brazilian law also seeks to ensure user control over their own data and has extraterritorial application. What is considered personal data? Before going into the details of the standard and its requirements, it is necessary to understand what is considered personal data. The LGPD defines it as any information related to an identified or identifiable natural person. This means the following: any data mobile number list by which you can identify a person or that with the union of other data allows this identification. It is important to know this because the LGPD does not deal with loose data on political, sexual, philosophical preferences, data related to ethnicity and of a religious nature. Unless they can be used to identify someone. This data is classified as sensitive personal data. How to treat personal data The first step towards compliance with the law is to carry out a detailed mapping of the personal data processed and its life cycle. Know where they are, how they are stored.



Who has access, if the data is shared with third parties in Brazil or abroad. And also what risks are associated with the life cycle. These are basic questions that all organizations must answer before establishing the law's implementation program. The LGPD regulates the processing of personal data and explains to companies when they can process this data. Thus, justifications are established that give the right to a company to handle this information. These justifications are an integral part of how the LGPD works. It is through them that the line between legal and illegal data processing is defined, preventing entities from using loopholes to manipulate personal data. Some of these justifications for data processing should be highlighted. Permission is one of them. The LGPD determines that if a company wants to use user consent as a justification for processing personal data, it must be clear.