Normativas orientadoras sobre a Lei Geral de Proteção de Dados no âmbito da Universidade Federal de Alagoas

Abstract

In recent years between 2018 and 2024, marked by legal and technological advances, society has experienced a revolutionary era marked by major changes. Public and private organizations began to be monitored in their information management, such as the collection, processing, storage and disposal of personal data. Thus, it was observed throughout the research that these organizations had difficulties in inserting and accepting the new requirements made by the Brazilian legislator. In this context, it is understood that a change in the external environment influences the organizational context and ends up impacting the entire structure, technical and social in its various sectors, so that they need to undergo a series of modifications that end up causing the least possible negative impact. In view of this, the need for the use of Information Management was seen, because, when well managed, it provides several benefits for the organization and for the protection of data and information of people, entities and institutions of the most diverse natures. In this sense, the General Data Protection Law was enacted in Brazil on August 14, 2028. Since the General Data Protection Law must be widely discussed and applied, this dissertation established the following research problem as a research problem: What are the guiding regulations available on the website of the Federal University of Alagoas regarding the protection of personal data? In the search for answers to the postulated problem, the general objective was to study the presence of guiding regulations on the General Data Protection Law within the scope of the Federal University of Alagoas. It was assumed that reliable and accurate information is essential for progress and success in many sectors, driving the economic, social, and cultural development of a society. The methodology adopted used a qualitative approach and defined documentary research as a guide for the data collection process. Such collection was carried out on the institutional website of the Federal University of Alagoas and used the following terms as descriptors: “LGPD”, “General Data Protection Law”, “Digital Governance”, “Data Protection Policy”. The search returned a total of 62 results. Based on the inclusion and exclusion criteria adopted, it was possible to conduct an evaluative study of 34 documents that were allocated in the following categories: Meeting Minutes, Digital Governance and Information Security Committee (CGDSI), Information Technology Center - NTI, Decrees, General Data Protection Law (LGPD), Technical Note, Master Plan, Ordinances, Resolutions, Audit Reports, Annual Report and events on LGPD and 5 events found related to LGPD. From this, the results show that the Federal University of Alagoas has been adhering to the molds of this Law, and developing strategies for insertion and control in the protection of personal data. The institution established privacy and data protection guidelines in accordance with the legislation and appointed the General Ombudsman as the data manager, instituted the Information Technology Governance, Digital Governance and Information Security Committee (CGDSI) and Information Technology Center (NTI), a body that provides support in the area of information technology.