Privacidade e proteção de dados pessoais em uma operadora de plano de saúde e suas unidades hospitalares

Abstract

The present work has the purpose of showing the adequacy of a medium-sized company in the health area, with approximately one hundred and fifty thousand customers and annual turnover close to eight hundred million, to the General Data Protection Law (LGPD). Initially, an analysis is made of the impacts of the indiscriminate use of citizens' personal data, therefore the need for a right to protect the legal good of personal data, showing how the protection of this information is a fundamental right for the development of the human person. Then, the evolution of the legal norms in Brazil related to the subject of protection of personal data is presented, as well as an investigation of the issues related to the LGPD's principle structure, the legal bases that allow the processing of personal data by companies and the government, the main actors involved and the penalties and fines provided for. Finally, the activities and actions necessary for a health plan operator and its hospital units are raised in order to comply with the legislation, guaranteeing the informative selfdetermination of its customers and avoiding the fines provided for non-compliance with the law or leakage of personal data.