The Importance of Data Security and Privacy: An Experience Report from CREA-SP with LGPD, Decree No. 10.278/2020, and MPS-SV

• Naje Cavalcante FabricaInfo
• Adriano Albuquerque UNIFOR https://orcid.org/0000-0002-1491-655X

Abstract

This paper presents an integrated process for document digitization that combines legal compliance with the General Data Protection Law (LGPD), Decree No. 10.278/2020, the compliance to results of MPS-SV related to security, operational efficiency through Artificial Intelligence (AI), and information security. The process was evaluated through a case study carried out at CREA-SP, where 1,747 documents (37,243 pages) were processed.

Keywords: Information Security, Data Privacy, Document Digitization

References

Doneda, D. Da Privacidade à Proteção de Dados Pessoais. RT, 2019.

Moraes, L. R. S.; Milaré, É. LGPD Comentada: Lei Geral de Proteção de Dados. RT, 2020.

Paula, P. A. V.; Silva, L. P. Gestão Documental e Transformação Digital. FGV, 2020.

Mckinsey & Company. Why Digital Transformations Fail: The MissingHuman Factor. 2022.

Goodfellow, I. et al. Deep Learning. MIT Press, 2016.

Brasil. Decreto nº 10.278, Diário Oficial da União, Brasília, DF, 2020.

Brasil. Lei nº 13.709 - Lei Geral de Proteção de Dados Pessoais (LGPD). Diário Oficial da União, Brasília, DF, 2018.

Softex. Guia Geral: MPS-SV-Modelo de Referência para Serviços. Disponível em: [link]. Acessado em 22 abr. 2025