Lei 13.709 : uma análise dos aspectos técnicos informáticos

Abstract

The evolution of information and communication technologies has been making everyday?s activities easier. Nowadays, many services are provided by both public and private entities using digital means, such as shopping, enrollment in various types of events and banking transactions. Most of these services request personal data, what rises questions on how safe is this information storage. Brazil has approved Law 13.709/2018 with the purpose of regulating how companies should manage personal data, in addition to clarifying their duties and responsibilities. Thus, this work was developed with the technical analysis of Law 13.709/18, to identify the technical requirements of information security. The analysis of three case studies was used to validate the identified requirements, providing the perception that companies need to improve their processes of information security management. This process doesn?t only refer to Law 13.709/18, but also to maintain practices that are effective in eliminating or reducing damages from information security breachs (sic).