Implementação de compliance à LGPD em instituições federais de ensino superior: proposta de um processo estruturado para conformidade

Abstract

With the advancement of technology and the increasing volume of personal data being collected, stored, and processed, it has become essential to establish clear and stringent guidelines to ensure the protection of individuals' fundamental rights regarding their personal data. The General Data Protection Law (LGPD) is a significant piece of legislation aimed at safeguarding the privacy and security of personal data. In this context, it is observed that, several years after the law's enactment, Federal Higher Education Institutions (IFES) still face challenges in implementing the law. Among the primary barriers are organizational culture, a shortage of qualified professionals, and the lack of a structured process for compliance with the law's requirements. In response, the Digital Government Secretariat (SGD) of the Federal Government of Brazil developed a framework to assist Federal Public Administration (APF) entities in adapting to the LGPD. However, there remains a need to enhance this process. Thus, based on the framework proposed by the SGD, the objective of this dissertation is to contribute to the improvement of the law's application by proposing a macro-process to assist IFES managers in complying with the LGPD. This proposal was developed through an extensive literature review of documentary analysis available in secondary sources, and subsequently validated in the case of the Federal University of Mato Grosso (UFMT). The motivation for this project lies in adapting the framework proposed by the Digital Government Secretariat to the realities of a Federal Higher Education Institution, considering its specificities and culture. Therefore, this dissertation also aims to contribute to other higher education institutions by extending the results obtained from the UFMT experiment, providing IFES with guidance on achieving compliance with the LGPD.