Impactos da lei geral de proteção de dados pessoais na gestão de processos de uma operadora de saúde

Abstract

The General Data Protection Law (GDPL), n° 13,709, was enacted in Brazil on August 14, 2018, establishing guidelines about data processing in national territory in order to protect the right to freedom and privacy of personal information. Consequently, it impacted all sectors of the economy, since all companies are subject to the law, both in the public and private sphere, that offer goods or services in the national territory or that make use of Brazilians' data. In the health sector, these changes affect several data sources, requiring maturity to use patient data efficiently and to deal with the challenges of adapting to the law. Thus, this research analyzed through a descriptive case study, using interviews and document analysis, how the General Data Protection Law impacts the Process Management of a health operator. To this end, the study analyzes the Process Management before the application of law in the company, as well as the adaptation actions resulting from the law that led to the study of the processes that make up the organization's value chain. As a result, it was found that the law brought a positive impact on the organization's process management, by requiring beyond the understanding of the regulations, practical changes in the organization's day to day regarding reliability and robustness to the processes, aiming to achieve the security of personal data.