Costa Junior, João Florêncio daCosta Junior, Jose Cassio da2023-07-262023-07-262023-07-19COSTA JUNIOR, Jose Cassio da. Os desafios da Lei Geral de Proteção de Dados para pequenas empresas: um estudo de caso em uma distribuidora em Natal/RN. Orientador: João Florêncio da Costa Junior. 2023. 116 f. Trabalho de Conclusão de Curso (Graduação em Administração) - Departamento de Ciências Administrativas, Universidade Federal do Rio Grande do Norte, Natal, 2023.https://repositorio.ufrn.br/handle/123456789/54179As Information Technology shapes relationships in society, the communication between companies and customers are based on the exchange of a high flow of data and information. Thus, the General Personal Data Protection Law (LGPD) is the regulation that establishes important and mandatory guidelines for any agent that collects, stores, processes or manages personal data, in any way, throughout the Brazilian territory. Small companies have special legal treatment through CD/ANPD Resolution no. 2, so they have flexibilities and simplifications in the procedures for implementing the LGPD. In this sense, this project analyzes the difficulties faced by a small company in search of compliance with these applicable laws, moreover, aims to consider the impacts of its strategic management efforts amid this process. A theoretical study is conducted based on the documentary analysis of the LGPD and Resolution no. 2, in addition to a bibliographical review which discusses the applicability of aspects of the LGPD, such as good practices, governance and compliance, in the strategic management of small companies. Furthermore, a case study is applied to investigate how this whole theory unfolds in the routines of a small distribution business. This is a descriptive research, with a qualitative approach. The results point to a structural fragility of the small company investigated, characterized by the limited technical knowledge of the business administrator, the lack of planning and well-defined strategies, and the limitation of human and financial resources. Therefore, it is indicated that planning and strategic management should be seen not only as essential processes towards company’s legal compliance, but also as opportunities for growth and longevity of its activities. Furthermore, it is suggested that the efficient company in ensuring the privacy and security of its customers' personal data, achieves better market positioning along with fundamental competitive advantages ahead of its competitors, even more so today, as we live in an information age.Attribution-NonCommercial-NoDerivs 3.0 Brazilhttp://creativecommons.org/licenses/by-nc-nd/3.0/br/Lei Geral de Proteção de Dados Pessoaispequenas empresascomplianceplanejamento estratégicoadministração estratégicaGeneral Personal Data Protection Lawsmall businessstrategic planningstrategic managementbachelorThesisCNPQ::CIENCIAS SOCIAIS APLICADAS::ADMINISTRACAO