Avaliando a conformidade dos processos internos da Universidade Federal do Ceará com a Lei Geral de Proteção de Dados

Abstract

The General Data Protection Law (LGPD) establishes standards for data processing, both in physical and digital media. Therefore, organizations must be aware of the importance of adopting measures to protect their subordinates’ data, thus avoiding the application of administrative sanctions by the National Data Protection Authority (ANPD) for non-compliance with the LGPD. This work aims to evaluate the compliance of certain UFC processes with the LGPD, proposing improvements for any non-compliance with this law found in these processes, as a way to complement this assessment. Furthermore, to document the work, evaluation tables and improvement proposals are prepared for all processes evaluated in this study. The results of this work were derived from the presentation of the tables developed to a staff member of this institution who works with business processes. Only the tables related to one of the processes evaluated were presented as a sample of the work. After this presentation, an interview was conducted with this employee to obtain feedback on the work done. The feedback provided by this individual revealed positive feedback regarding the work, as he considered the assessment proposed in this study important and expressed satisfaction with the tables developed.