APPLICATION OF THE GENERAL DATA PROTECTION LAW (LGPD) IN COMPANIES: IMPACTS ON BUSINESS LAWThis Final Graduation Paper aims to analyze the application of the Brazilian General Data Protection Law (Law No. 13.709/2018 – LGPD) within the corporate context, highlighting its main challenges, practical impacts, and possible solutions for compliance. The research addresses the regulatory structure of the LGPD, its fundamental principles, and the duties imposed on data processing agents, with emphasis on the responsibility of companies in fulfilling the technical, administrative, and organizational measures required by the legislation. Additionally, the study examines real cases of data breaches, as well as episodes of improper exposure of images captured by surveillance systems. Based on this analysis, the study demonstrates the relevance of privacy governance, organizational culture, and the adoption of consistent information security policies as essential elements for LGPD compliance. It concludes that the protection of personal data represents not only a legal obligation but also an ethical and strategic commitment capable of strengthening public trust, reducing risks, and promoting greater accountability within the Brazilian digital environment.

Abstract

This Final Graduation Paper aims to analyze the application of the Brazilian General Data Protection Law (Law No. 13.709/2018 – LGPD) within the corporate context, highlighting its main challenges, practical impacts, and possible solutions for compliance. The research addresses the regulatory structure of the LGPD, its fundamental principles, and the duties imposed on data processing agents, with emphasis on the responsibility of companies in fulfilling the technical, administrative, and organizational measures required by the legislation. Additionally, the study examines real cases of data breaches, as well as episodes of improper exposure of images captured by surveillance systems. Based on this analysis, the study demonstrates the relevance of privacy governance, organizational culture, and the adoption of consistent information security policies as essential elements for LGPD compliance. It concludes that the protection of personal data represents not only a legal obligation but also an ethical and strategic commitment capable of strengthening public trust, reducing risks, and promoting greater accountability within the Brazilian digital environment.