THE GENERAL DATA PROTECTION LAW (LGPD) AND ITS APPLICATION TO VIRTUAL RAFFLES: IS THE LEGISLATION SUFFICIENT TO ENSURE THE SECURITY OF USER DATA?

Abstract

The expansion of activities conducted in digital environments has also altered the way raffles are organized, promoted, and sold. So-called virtual raffles—often held via social media and digital platforms—require participants to provide personal information, thereby creating data processing relationships that must be examined in light of Brazilian legislation. In this context, the LGPD (General Data Protection Law) establishes principles, rights, and duties aimed at protecting data subjects' information; however, its application to the specific nature of virtual raffles raises issues that remain underexplored. The relevance of this research lies precisely in addressing this gap, considering the flow of personal data in digital activities and the risks associated with its use, storage, and sharing. The study aims to analyze the application of the LGPD to virtual raffles, assessing whether it provides sufficient protection for users' personal data. To this end, a qualitative, descriptive study was conducted through a literature review and an analysis of relevant legislation. The search was carried out using Google Scholar, SciELO, and the CAPES Journal Portal, employing keywords related to the LGPD, data protection, privacy, information security, data processing, and virtual raffles. The legislative analysis focused on Law No. 13.709/2018. The results indicate a scarcity of specific academic literature regarding the application of the LGPD to virtual raffles, necessitating a bridge between existing theory and the specific characteristics of this activity. The study found that the LGPD establishes significant protection mechanisms, although their effectiveness depends on compliance with legal obligations and the oversight of digital practices.