The process of adapting to the General Data Protection Law (LGPD) is one of the challenges of the digital world – although it is not the only one. It demands greater transparency, security, and clarity in communication between users and data managers.
The LGPD is a law that applies to any individual or legal entity that needs to process personal data. In other words, the LGPD applies to any information about an individual that you request.
Therefore, people outside the fields of privacy, legal issues, or digital affairs have had to resort to other means, people, or agencies to verify their security processes.
1. Identify which data are commonly collected.
The LGPD (Brazilian General Data Protection Law) must be considered for all information that is frequently collected for your business. Delivery addresses, CPF (Brazilian tax identification number), phone number, name, email, among other information that is currently required.
If your business hasn't been formally established yet, it will be easier to gather the essential information for the compliance process, given your current business model.
2. Understand that no information should be shared without consent.
The shared use of data depends exclusively on the permission of the data subject, except in situations provided for by... LGPDAn example of a clear transcript: “The data is not exchanged or disclosed to third parties, except when it is information necessary for process X.” Article 8 states that consent “must be given in writing or by other means that demonstrate the data subject’s expression of will.”
When done in writing, it must be included as a clause separate from the other contractual clauses. In such a situation, the burden of proof rests with the data controller to demonstrate that consent was obtained in accordance with the LGPD (Brazilian General Data Protection Law).
3. Be transparent in your communication.
Keep in mind that a privacy policy It should be present on your website. It's ideal for users to understand data security, the data collection and processing process, and the importance of certain data for customizing the user experience, such as cookies.
For those who want to comply, there must be transparency on the part of the company in stating what is done with the stored data and what measures are used to ensure greater security.
4. LGPD Council: Have an internal policy.
Companies' commitment must also be transparent. Within your company, have a policy that promotes the security of personal data. These policies need to be effective and ensure that the process is legitimate, legal, and company-wide. The more internal policies there are, the more seriously the issue is taken, and consequently, the lower the risk of suffering potential consequences from negligence and vulnerabilities in the security system.
5. Rely on privacy tools.
LGPD is a complex topic that demands more than just knowledge in the area of privacy; it also requires knowledge in the areas of technology, IT, and legal matters.
To ensure proper privacy management that protects and manages data from customers, suppliers, and employees, Privacy Tools is the best option to ensure your company complies with the law.
Do like the other 500 companies we've served and take this step towards compliance!
