The entire data flow within the company

[joyuwnto787]

It's important to understand that consumer rights involve clearly, expressly, and unequivocally stating the purposes for which data will be used and the data flow within the company. In other words, consumers have the right to receive information about what the company will do with their information.

This is one of the main consumer rights under the LGPD: the right to consent to the use shop of their data, revoke consent, update their information, and access this data flow. Furthermore, consumers who suffer any harm resulting from an incident involving their personal data can contact the appropriate authorities to request appropriate compensation.

LGPD for companies

Regarding companies, it's important to emphasize their underlying responsibility for data use. must be mapped; that is, the path the personal data the company receives must be understood.

This traceability and mapping, control mechanisms, and a comprehensive information security management policy are essential. This set of protections and rules is called Data Protection Compliance, or Privacy Governance, as the law refers to it.

Regarding companies that aren't covered by the LGPD, I believe the ANPD—the national data protection authority—will create a mechanism to receive reports of data breaches and any misuse of data. Administratively, we'll have the national authority, and other agencies with the authority to do this, such as Procon itself when it comes to consumer data. In more extreme cases, the judiciary may be called upon to take action to prevent companies from acting in violation of the law.