Avaliação de Conformidade com a LGPD: Um Modelo de Maturidade de Processos

Abstract

The exponential increase in digital activities, such as e-commerce, remote work, and distance education over the past decades, has brought economic and social benefits through the rapid adoption of Information and Communication Technology. However, this has also led to a rapid accumulation of data. This exponential growth in the volume of data generated and shared has significantly elevated the risk of privacy breaches, making the implementation of robust regulations essential. To achieve a fully digital government, it is crucial that the sharing of personal data in all spheres is both socially appropriate and compliant with regulatory bodies. This paper proposes a process maturity model to assist organizations in meeting these legal compliance requirements with the General Data Protection Law (LGPD). The goal is to establish a clear and effective structure for evaluating an organization's level of maturity in relation to the Law. Non-compliance with this law represents an obstacle to the country’s ambitions of joining important economic blocs and international organizations and may also harm the national data protection system. It is expected that the implementation of this model will support organizations in aligning with the principles outlined in the LGPD, while also enabling them to assess the level of maturity achieved concerning the criteria set by the legislation.