Um estudo exploratório sobre a Lei Geral de Proteção de Dados Pessoais na perspectiva das vulnerabilidades em smartphones android

Abstract

In Brazil, according to a study by the Getúlio Vargas Foundation in 2020, each inhabitant had about 2 digital devices, a total of 440 million devices. The increase in connectivity and the popularization of the Internet have enabled citizens to carry out almost all of their usual tasks online, such as: performing bank transactions, online shopping, scheduling appointments, connecting with friends, etc. Therefore, such devices store a significant amount of sensitive data, in addition to personal documents and photos. Some of this data is stored in clouds or on the device itself, but the user does not have control over how they are manipulated and accessed. Therefore, smartphone users need resources that protect their data both in terms of laws and in the use of computational techniques. As a way to show and respond to how this data is being used, there is the General Law for the Protection of Personal Data (LGPD) that regulates the activities of processing personal data. This work aims to present an assessment of the impact of the General Law for the Protection of Personal Data (LGPD) on mobile applications with the intention of mitigating or eliminating possible data vulnerabilities. As a result, an Android application prototype was presented to analyze vulnerabilities in Android systems and how the LGPD could mitigate these vulnerabilities.