LGPD Compliance Maturity Model - General Law for the Protection of Personal Data

Abstract

Several nations identified the need to revise their legislation in order to make data protection feasible for holders and users, as in Brazil, with the publication of Law no. 13.709 / 18 - General Law for the Protection of Data. Personal Data (LGPD). This research proposes a model to identify, in an organization, the level of compliance maturity to LGPD. The research was classified as exploratory, applied a qualitative approach. In addition, a methodology was used to build the maturity model, combined with the technique of content analysis and survey application. The initially proposed model was evaluated by a group of experts using the focus group discussion technique, generating inputs for review and proposition of the final model. When the model is applied in the organization, it will be possible to identify the stage of maturity of compliance with the LGPD, allowing the company to carry out continuous improvement actions.