A adequação do Instituto Nacional do Seguro Social (INSS) à Lei Geral de Proteção de Dados (LGPD): uma investigação sobre a proteção de dados pessoais dos usuários

Abstract

The General Personal Data Protection Law (LGPD) represented a regulatory milestone for data processing in Brazil, applicable to both the public and private sectors. Considering the relevance of the topic for government agencies that deal with large volumes of sensitive information, this research seeks to understand the extent to which the National Social Security Institute (INSS) has adapted to the provisions of the LGPD to ensure the protection of its users’ data. The study is justified by recurring cases of data leaks that expose citizens to risks such as fraud, identity theft, and emotional harm. A qualitative and descriptive approach was adopted, based on documentary analysis, using the principles of the LGPD, the rights of data subjects, governance practices, information security, and the accountability of the agents involved as a basis. The overall objective is to verify whether the measures implemented by the INSS meet legal requirements and are effective in protecting personal information. The results aim to contribute to the understanding of the challenges faced by public administration in implementing the LGPD and to identify possible weaknesses that compromise data protection in the public sector.