Treating data consciously and securely, as determined by the LGPD, goes far beyond reformulating the cookie banner and updating some security procedures, such as the use of defense software.
The Information Security pillar is crucial to establishing data governance, but it is not the only one.
The processing of personal data must follow the principles and fundamentals of the law, and for that we need to know what personal data is processed by the business and how, generating a record of processing activities.
Similarly to the GDPR, the cookie banner and the Privacy policies must reflect the directions of the LGPD and how the company is effectively processing personal data.
Personal data has a lifecycle that begins with collection and ends with disposal, all within the conditions established by the law, which needs to be identified in detail and correctly addressed.