Proteção de dados: experiência internacional e o caso brasileiro – relação com a segurança da informação e a governança cibernética

Abstract

This article presents an analysis of the main aspects related to privacy in the digital environment and the regulations that deal with the subject and its evolution, highlighting the issue of data protection both in Brazil and in other countries and blocs. In relation to the General Data Protection Law in Brazil, a detailed study has been carried out on the evolution of the issue in the country and the repercussions that the law has caused, especially in relation to the need to expand information security and cyber governance. Also reviewed are events that occurred, such as the episode of Edward Snowden’s accusations, which, together with the advent of the General Data Protection Law, led to the need to expand the Brazilian regulation that deals with cybersecurity, thus bringing the aspects that led to the elaboration and publication of a National Cybersecurity Policy in Brazil. Aspects related to surveys and audits carried out by the Federal Audit Court, the country’s external control body, are also covered, with the aim of evaluating the actions and risks related to the protection of personal data, in terms of government actions, which raises the need to issue new regulations and, once they are in force, to know data on their implementation.