Controle sistêmico de atividades de tratamento de dados no compliance da Lei Geral de Proteção de Dados em clínica médica

Abstract

This is a descriptive and explanatory analysis of Law nº 13.709/18, known as the General Data Protection Law - LGPD, regarding the impact on the data processing of small and medium-sized companies, in particular in meeting the requirements set forth in the statute, in completing the mandatory documents and reports, which must be generated by the organizations during their operational cycle and the importance of using systemic tools to control all stages of the process in order to comply with the Law. The research is exploratory, bibliographical and documental in nature, based on books, articles, legislation and documents. The investigation examined the process of adapting a medical clinic to the LGPD, describing its stages for adapting the Reception, Administrative, Financial and Human Resources areas, prioritizing these departments because they present a high number of data processing in non-compliance with the LGPD. The study used a systemic tool, developed exclusively, which simplifies and streamlines the tasks of mapping data processing activities and organizes the maintenance of updated information during the compliance work carried out at the Clinic.