When we stop to analyze the global technological landscape, it is impossible to deny the importance of the internet and its ability to disseminate information in a democratic and globalized way. Despite the benefits this entails, one question has begun to enter users' vocabulary: what about data security and privacy?
By participating in and benefiting from this technological wave, companies find themselves adrift of a new and fundamental need: to comply with the LGPD, or General Data Protection Law. What does it entail? What are the new obligations? And more importantly, is my company prepared to meet the needs of consumers and comply with legislative protections?
Even with the evident need to implement new methods for information security, some obstacles arise to the practical implementation of the LGPD throughout the national territory. Currently, in Congress, the postponement of the law is being discussed, while lawmakers offer new interpretations of the text with an exaggerated focus on the penalty system.
In contrast, experts point out that this reductionism not only harms the discussion but also ignores the real reasons proposed by the legislation. The central idea is to educate companies and the general public in order to gradually establish a basic understanding of consent and the value of data.
Thinking about providing greater clarity on the subject, I decided to write an article to help those who are not yet aware of the urgency of the matter. Follow along!
The central pillars of the law
Sanctioned in August 2018 and expected to come into force in the same month this year, the General Data Protection Law (LGPD) was created to address citizens' rights regarding their data and information acquired by companies. The idea is to return to the user, whether an employee or customer, the consent over what concerns them and, in most cases, is used, manipulated, and transported by companies that do not care about cybersecurity.
There is no denying that, in a way, the Brazilian scenario is not very favorable. In a recent survey published by Serasa Experian, it was revealed that about 85% of Brazilian companies are not prepared to meet the requirements set out in the LGPD.
As with any profound change, it is natural to identify some hesitation among the professionals responsible for their respective management models and operating systems. However, the urgency here is greater than imagined. Failure to comply with or violation of requirements regarding the handling of personal data can result in extremely damaging penalties for companies, with the chance of reaching millions of dollars.
Transparency, consent, and security are the three great pillars of the new legislation. Adapting a company's reality to the LGPD means assimilating these three aspects and embracing the overall change in mindset.
Dealing with regulation in the digital age
In the mission to prepare for all the details and concepts attributed to the law, some measures, tools, and processes emerge as great allies. IT departments within organizations lead much of the movement to take on the complexity of the subject and sustain effective solutions. At the same time, involving other internal teams is essential to ensure the secure handling of customers' personal data.
Mapping existing information in order to qualify it is also an indispensable practice. In this way, impact and influence parameters for specific materials can be created, facilitating the procedural adoption of the LGPD.
The importance of technological assistance
The new legal obligations are complex and require a high level of knowledge on the part of business managers. And in this process, technological tools and automated systems can determine the success of a responsible data policy. There are many operations indicated to improve privacy governance, and with so many concerns, nothing is better than simplifying the implementation process of these new methods. It is precisely in this sense that automated solutions come in to help.
In addition to offering accuracy and speed in resolving steps, the use of technology also encourages better decision-making, offering time and space for professionals to dedicate themselves to strategic functions that require a complex approach.
Regarding information security, the adoption of tools capable of ensuring data integrity is simply essential. Risk management services, monitoring, cloud computing, control points, segmentation, and content unification. All of this addresses the urgency of complying with the LGPD. The law is close to coming into force, and procrastinating measures regarding this is flirting with unnecessary danger.
I hope this article has helped in some way! Stay tuned for more texts on the subject.
*Luiz Marcelo Penha is COO and Co-founder of Nextcode
Source: https://politica.estadao.com.br/blogs/fausto-macedo/os-efeitos-praticos-da-lgpd-para-a-realidade-das-empresas/
