{"id":2855,"date":"2021-06-30T00:09:36","date_gmt":"2021-06-30T00:09:36","guid":{"rendered":"http:\/\/kevinbk.com\/\/?p=2855"},"modified":"2023-09-28T09:53:48","modified_gmt":"2023-09-28T09:53:48","slug":"lgpd-conheca-a-lei-de-protecao-de-dados-e-como-ela-age-no-marketing-digital","status":"publish","type":"post","link":"https:\/\/kevinbk.com\/en\/lgpd-knows-the-data-protection-law-and-how-it-acts-in-digital-marketing\/","title":{"rendered":"LGPD: Learn about the data protection law and how it works in digital marketing"},"content":{"rendered":"

THE LGPD<\/strong>, General Data Protection Law, came into force in September 2020, placing Brazil among the 120 countries with laws specifically aimed at protecting users' personal data.<\/p>\n\n\n\n

Discussions about privacy and online security are global issues, so their implementation in the country is nothing new. <\/p>\n\n\n\n

Furthermore, it is important to emphasize that the project is from 2018, comprising Law number 13.709\/2018, which regulates the processing of personal data of users in the national territory. <\/p>\n\n\n\n

It focuses on the operation of operations that involve the use of personal data, penalizing companies that do not follow its determinations.<\/p>\n\n\n\n

In this way, from managers, marketing professionals, sales staff, to customers, of a company of biometric access control<\/strong><\/a>, for example, must be aware of the new law.<\/p>\n\n\n\n

So, keep reading and understand all the details, as well as its direct impact on digital marketing and how to keep this strategy in full swing, respecting all current legal standards.<\/p>\n\n\n\n

\"LGPD:<\/figure><\/div>\n\n\n\n

Get to know some of the important concepts<\/h2>\n\n\n\n

In order to understand legal aspects, it is essential to be aware of the terminologies used, what they are about and what is the scope. Well, thinking about it, we separated some key points for understanding the LGPD:<\/p>\n\n\n\n

Principles<\/h3>\n\n\n\n

LGPD is based on ten principles that must be integrated into the reality of the business and complied with by the agents when processing the data of each of the customers who hire the company for the installation of, for example, a biometric turnstile<\/strong><\/a>.<\/p>\n\n\n\n

We use this example to draw attention to the need for the demand to identify which data is processed, as well as its purpose, which must be legitimate, explicit, specific and informed to the data subject. The principles are: <\/p>\n\n\n\n

  1. Goal;<\/li>
  2. Need;<\/li>
  3. Adequacy;<\/li>
  4. Free access;<\/li>
  5. Transparency; <\/li>
  6. Quality;<\/li>
  7. Safety;<\/li>
  8. Prevention;<\/li>
  9. Accountability;<\/li>
  10. Non-Discrimination.<\/li><\/ol>\n\n\n\n

    Thus, it is the responsibility of the company manager to ensure that the treatments are adequate for the purposes, never having discriminatory, abusive or illegal purposes.<\/p>\n\n\n\n

    Treatment<\/h3>\n\n\n\n

    The processing of personal data, object of the Law, refers to all operations carried out with this information, involving an economic purpose, for example, the sale of stainless steel cabinet<\/strong>. <\/p>\n\n\n\n

    In other words, they are part of: reception, collection, production, access, use, classification, evaluation, processing, communication, reproduction, storage or archiving, modification, distribution, transmission or transfer, extraction or elimination. <\/p>\n\n\n\n

    Any of these actions related to information control is within the scope of the LGPD. Be aware that excessive and unnecessary treatments are not well regarded.<\/p>\n\n\n\n

    However, it does not apply when the processing of data is done for private and non-economic purposes, as well as exclusively for journalistic or artistic purposes, for public or state security, and for criminal investigations.<\/p>\n\n\n\n

    treatment agents<\/h3>\n\n\n\n

    Another key point to be detailed for the implementation of actions that ensure legal compliance for a company specialized in industrial painting<\/strong>, for example, are the agents involved.<\/p>\n\n\n\n

    Everyone must be aware of their role, function and purpose in the processing of personal data. Furthermore, the LGPD designates four agents, with different roles related to data processing, they are:<\/p>\n\n\n\n

    1 - Holder<\/h4>\n\n\n\n

    In this case, it is an individual or legal entity that owns the data. <\/p>\n\n\n\n

    2 \u2013 Controller<\/h4>\n\n\n\n

    It is an individual or legal entity that collects data and decides on its treatment.<\/p>\n\n\n\n

    3 \u2013 Operator<\/h4>\n\n\n\n

    It is an individual or legal entity that processes and processes data under the supervision of the controller.<\/p>\n\n\n\n

    Even controllers and operators must be aware of the transparency of their operations, in addition to following preventive practices for data protection, such as encrypted systems.<\/p>\n\n\n\n

    4 \u2013 Supervisor<\/h4>\n\n\n\n

    It is an individual appointed by the controller, who acts as a communication channel between all the agents involved, as well as the national authorities (ANPD), and provides guidance on data processing practices. <\/p>\n\n\n\n

    This agent is responsible for implementing and monitoring compliance with the LGPD throughout the national territory.<\/p>\n\n\n\n

    Personal data<\/h3>\n\n\n\n

    Any business, regardless of the sector, such as a factory capacitor bank<\/strong><\/a>, handles personal data daily. Since personal data is any category of information that makes it possible to identify a person, directly or indirectly.<\/p>\n\n\n\n

    As an example, we can mention the name, CPF, RG, telephone, home address, date and place of birth or the number of bank cards.<\/p>\n\n\n\n

    Sensitive data are also considered, those linked to a natural person, and that can subject or interfere with certain behavior, such as ethnic or racial origin, political, philosophical or religious opinion.<\/p>\n\n\n\n

    Health-related data, such as biometric or genetic information, medical records, and even preferences and consumption habits, also apply.<\/p>\n\n\n\n

    In addition, data such as IP address and geolocation, for example, which make a person identifiable through the use of technical means, are part of the list.<\/p>\n\n\n\n

    Finally, information from legal entities or anonymized data, which cannot be associated with a natural person, is outside the scope of the LGPD.<\/p>\n\n\n\n

    Consent and legitimate interest<\/h3>\n\n\n\n

    The Law provides for nine situations that make data processing lawful, but there are two main points directly linked to digital marketing, so we will focus on them.<\/p>\n\n\n\n

    Both consent and legitimate interest can only be expressed by the data subject \u30fc a person gives consent to the use of their data when they freely and explicitly accept the grant after being informed that they are providing such information. <\/p>\n\n\n\n

    That is, consumers actively choose to engage or not with a company that provides assembly of electrical panels<\/strong><\/a>, for example. <\/p>\n\n\n\n

    The legitimate interest, on the other hand, refers to the authorization for the company to use and treat your personal data in a manner and for purposes authorized by the LGPD and, in this case, only strictly necessary data can be processed.<\/p>\n\n\n\n

    It refers to activities of support, promotion, and\/or provision of services that benefit it, according to the holder's expectations and the guarantee of his fundamental freedoms.<\/p>\n\n\n\n

    However, it is important to emphasize that both consent and legitimate interest can be revoked by express manifestation, at any time. <\/p>\n\n\n\n

    In addition, the holder may demand access, correction and updating of their data, as well as anonymity, blocking or deletion of unnecessary data. <\/p>\n\n\n\n

    The request for data portability to another provider and information about which entities, public or private, had access to the data, are also user rights.<\/p>\n\n\n\n

    Thus, the controller of your company distributing self-adhesive labels<\/strong>, for example, should be responsible for:<\/p>\n\n\n\n