Uma abordagem tecnológica para o cumprimento da Lei Geral de Proteção de Dados: para especialistas e leigos

Abstract

In the global landscape, information security is an extremely relevant topic that is constantly under debate. With the advancement of technology, large companies collect an immense amount of data daily, raising crucial dilemmas about privacy and the rights of data subjects. This increase in data collection not only facilitates the personalization of services and products but also generates concerns about how this information is stored, used, and shared. Thus, in 2018, Brazil enacted the General Data Protection Law (LGPD) with the aim of ensuring individuals’ rights regarding their personal data, representing an important milestone in privacy protection by guaranteeing greater transparency and control for data subjects over their information. Consequently, website administrators are legally obligated to implement the standards established by the LGPD. Without the guidance of a specialist, this task becomes increasingly challenging, requiring technical knowledge and a deep understanding of legal requirements to ensure compliance and the protection of personal data. Therefore, this work aims to develop a web-based tool for automatic website analysis, intended to identify non-compliances with the legislation and suggest necessary adjustments to ensure compliance with the law. Additionally, a comparison was proposed between the analysis performed by the tool and the manual analysis conducted by volunteers who were willing to participate in an experiment, providing their feedback on the tool.