As in other sectors, the changes in the processing of personal data for compliance with the LGPD they will also impact the way industries work. The LGPD presents three security principles to be adopted: reliability, integrity, and availability of information. But it also requires that the information be deleted after its purpose is completed.
With compliance with the LGPD every industrial chain will need to prioritize internal projects to protect the privacy of customer and partner data, as well as establish rules for its collection, use, treatment and storage. To adapt to the new legislation, you will need to review your internal procedures, policies, and data flows, in addition to reviewing, or drafting, if you don't have one, a privacy policy and internal training.
Industries must adopt certain procedures when implementing or compliance with the LGPD, which involve, first of all, naming a collaborator in charge of the data. According to the law, “you are the person responsible for the personal data collected, processed and stored by the company”. After identifying the industry processes that process data, it will be necessary to adopt privacy rules and policies to protect them.
The LGPD establishes that the data controller is responsible for decisions regarding its processing. In this case, in compliance with the LGPD, it is important for the company to review its contracts with suppliers and service providers that use personal data on its behalf, to adjust them if necessary. Industries that have sales sites must make explicit on the pages the criteria used for processing the information, so that it will also be necessary to adapt the site in view of compliance with the LGPD.
Although it seems like a hard-working challenge, the new legislation is seen as an achievement for industries and their compliance with the LGPD will bring several benefits, as it not only regulates your relationship with the customer, but with all employees and the production chain.
Contact TATICCA — ALLINIAL GLOBAL, which has a qualified and experienced multidisciplinary team, tools and methodology to implement LGPD in an objective and assertive manner, with: guidance and training, diagnosis, analysis of employee contracts, analysis of supplier contracts, analysis of internal policies, analysis of contracts for the provision of service or sale of products, adaptation of contracts in accordance with LGPD, data mapping, implementation of the service channel, drafting of a privacy policy, pre-formatted documentation with all the requirements of LGPD.