LGPD - What will be the role of the Data Protection Officer (DPO)?

Due to the news about protection failures, data breaches or leaks and in view of the enormous scope of data dissemination by digital means, the topic of information security assumes that it creates and generates the creation of specific laws such as the General Data Protection Law - LGPD -, which will come into force in Brazil in 2020. In this scenario, the Data Protection Officer (DPO), also called Data Protection Officer, appears.

The DPO will act as an internal auditor, managing the flow of information, from collection to treatment. In case of irregularity, it will be his obligation to make adjustments, adapting the company to the Brazilian legislation. Your work must be aligned with the information security area, but also with the legal department, to guarantee the legality of the adopted procedures. As stated in the LGPD, the DPO is responsible for: accepting complaints and communications from the holders, providing clarifications and adopting measures; receive communications from the national authority and take action; advise the entity's employees and contractors on the practices to be taken in relation to the protection of personal data; and perform the other attributions determined by the controller or established in complementary norms. Such assignments make it a fundamental role in strategic decisions and give it considerable autonomy.

Due to the characteristics of the activity, extensive knowledge about LGPD, compliance, personal data governance, information security and IT are requirements for the position. Experts recommend that organizations name their DPOs even before the LGPD comes into force, in order to anticipate analyzes and start training employees.

According to research by Gartner, privacy is increasingly a critical issue for organizations and has been generating new standards of work, as well as the definition of stricter requirements. The regulation reinforces the importance of data protection and security for businesses, companies and customers, and everyone must adapt to it.

sources:

https://cio.com.br/gdpr-e-lgpd-gestores-devem-se-preparar-para-o-pior-mas-esperar-o-melhor/

https://www.cosjuris.com/lgpd-cria-a-profissao-dpo-data-protection-officer/

https://polinize.com/gartner-avalia-tendencias-para-o-futuro-da-privacidade-de-dados/

https://digitalguardian.com/blog/what-data-protection-officer-dpo-learn-about-new-role-required-gdpr-compliance