Implementação de Lei Geral de Proteção De Dados (LGPD) em uma Concessionária Automotiva

Abstract

With the advent of technologies, there has been an intensification in the generation of data about users. In response to this trend, countries have been making efforts to establish legal frameworks that regulate the proper handling of personal data. In Brazil, the General General Data Protection Regulation (GDPR), in force since 2018, outlines the conditions for the retention, use, processing, and deletion of such data. In this context, a study was conducted at a vehicle dealership with over two decades of registered data, totaling more than 130,000 registered customers. In light of this, the company developed a data protection implementation process in compliance with LGPD requirements. To achieve this, mandatory documents for legal compliance were drafted, including privacy policies for employees, consumers, and partners, policies for the execution of data subjects' rights, cookie policies, data retention policies, as well as records of personal data processing activities (data mapping), appointment of a Data Protection Officer (DPO), notification of personal data breaches, and marketing consent forms. Additionally, the company plans to develop the Personal Data Protection Impact Report (RIPD) and best practice documents after consolidating the implementation of the system. This study is of utmost relevance, particularly at a time when the national government is demanding full compliance with legal aspects from companies, and consumers are becoming increasingly aware of the importance of ethical conduct regarding sensitive data.