Compliance, cultura corporativa ética: uma análise sobre a aplicação da Lei Geral de Proteção de Dados 13.709/18

Abstract

The recent applicability of the General Data Protection Law LGPD, 13,709 / 2018, creates rules regarding the legitimate interest in the collection, manipulation and treatment of personal data, by companies and public agencies. Justifying, thus, the permissiveness of an Organization that owns the data, in accessing, using and sharing it, provided that fundamental rights such as the privacy of its owners are protected. In this sense, the objective of this work is to demonstrate the importance of the pillars of a Compliance program in the promotion of a Corporate Culture directed to ethics and integrity, cooperating with Organizations that have this inter nal compliance control to conform to the guidelines of the General Law Data Protection Act LGPD. The methodology used was based on a qualitative approach through research bibliographic review, using the deductive dialectical method in compliance with the current legislation related to information technology and privacy policies such as the Marco Civil da Internet and t he European Data Protection Regulation, also based on the Compliance Maturity Survey in Brazil KPMG. In view of the above, it is concluded the importance of Compliance beyond the fulfillment of legal and regulatory barriers, incorporating a strategic sus tainable model to Organizations, which supports their codes of conduct, guides the activities of its members and brings a Corporate Governance focused efficiency, risk management and business security.