Data subjects, that is, the owners of certain personal information, now have strengthened rights under the General Data Protection Law (LGPD). Each citizen can now request that a given company delete their data from its database, modify it, or anonymize it.
Check out the details of what each type of request means and how your company can fulfill customer requests to comply with the LGPD (Brazilian General Data Protection Law), which has been in effect since last year:
Data anonymization
It is the right of citizens to have their data anonymized by companies, so that it is not directly linked to them. For example: you keep a user's browsing data on your e-commerce site, but you no longer store the name of the person who visited those pages. Or you keep their phone number, but... It is no longer possible to know who the owner is. of that number.
In this way, data is more secure in case of leaks, and customers are not as exposed. To make this possible, you need good technological tools that help in the process of separating one thing from another.
Blocking the use of data
Data blocking is the temporary suspension of any processing of a specific person's personal data. It can be requested by the data subject themselves or be a penalty for violating the LGPD (Brazilian General Data Protection Law).
In other words, if your company needs Blocking data processing Regarding a person's data, it should not be accessed in the database for a period of time, that client cannot be contacted, among other forms of data use that are suspended until further notice.
data deletion
When a data subject requests that their personal information be deleted from a company's database, the institution must remove all data related to them. definitively.
The legal basis for data processing must be taken into account before requesting deletion. If that information is essential for the service to be provided, for example, the data may not be removed as long as it remains essential.
There are other cases in which information may not be deleted: if it is part of studies by research bodies, provided that the data is anonymized; in cases of transfer to third parties, provided that the data processing requirements set forth in the law are respected; exclusive use by the controller, prohibiting access by third parties and provided that the data is anonymized.
Other rights of data subjects under the LGPD:
- Confirmation of the existence of the treatment;
- Access to data;
- Data correction;
- Data portability to another provider or service, provided that commercial and industrial secrets are respected;
- Information about the public and private entities with which the controller shared the data;
- Information about the possibilities of not giving consent and about the consequences of refusal;
- Revocation of consent.
If your company doesn't yet have a way to handle data subject requests, it's time to invest in a customer service tool to better comply with the new law.
The Privacy Tools Data Subject Request solution functions as a specialized service platform. It allows for the control of deadlines and requests, provides automated responses, and also audits the history of requests made.
Start your free trial today. Make privacy part of your company culture!
