By John Kyriazoglou
Overview
This
template available at: https://flevy.com/browse/marketplace/lgpd-processing-records-tool-5983) may be used to record the personal data
processing operations of any enterprise in order to comply with the
requirements of LGPD (Brazil’s new data protection law).
Personal data usually exist in business
functions, processes, IT systems, digital media, CCTV systems, etc.
LGPD does not specify the contents of
the processing records of personal data. This tool is based on GDPR, as LGPD is
very similar to this regime and on the principles of processing in LGPD.
It is designed to comply with the
general requirements of LGPD (Brazil’s Data Protection Regulation, Articles: 3,
6 to 9, 12, 14, 38, 39, 46, 47, 49).
It contains 8 parts (sheets)
Contents
Sheet 1. ‘Read me’: Introduction and
related information about using this tool.
Sheet
2. LGPD PD Inventory Template: A list of over 31 fields (e.g., Purpose of
Processing, Type of Processing, Type of data, ‘Who’ can access personal data,
Processor, Legal Basis of Processing, etc.) with explanatory remarks on how to
complete them in order to create the company’s processing records.
Sheet
3. LGPD PD Inventory Example: A completed real example of the fields of the
template (e.g., Purpose of Processing, Type of Processing, Type of data,
Processor, Legal Basis of Processing, etc.) for a process of a business
function (Managing HR Personnel files, in the Human Resources Department).
Sheet
4. Corporate Data: The full details (e.g., name, address, e-mail, telephone) of
the controller, the DPO and the processors used by the company.
Sheet
5. Compliance Measures: A list of LGPD Compliance Security and Privacy Measures,
such as: Privacy Laws Manual; LGPD Compliance Manager; Gap Analysis; Privacy
Training Plan; Personal Data Breach Controls; Encryption Policy; IT Disaster
Plan, etc.
Sheet
6. Terms: A description of several LGPD Terms related to this tool (e.g.,
personal data, sensitive data, etc.).
Sheet
7. Resources: A list of references containing a detail description of all LGPD
articles in both English and Portuguese and a set of books to support LGPD
Compliance activities.
Sheet
8. PD Examples: A list of over 36 Personal Data Examples, such as: First and
last names, Personal Address, Personal e-mail address; Personal identification
numbers (PIN) or passwords; Personal telephone number; Photograph or video
identifiable to a natural person, etc.
Hope this email finds
you well. We have just reviewed your product: LGPD Processing Records
Tool. Your document is now live on the Flevy Marketplace!
https://flevy.com/browse/marketplace/lgpd-processing-records-tool-5983