Initial Perceptions of Undergraduate Students About LGPD and Information Systems

• Lucas Vieira de Moura UFC
• Emanuel Coutinho UFC

DOI: https://doi.org/10.5753/washes.2024.2935

Abstract

The General Data Protection Law (LGPD) presents guidelines for important factors in guaranteeing user data privacy. In an institutional context, in which various applications and systems coexist, data is obtained and generated at all times. There is a difficulty in adapting LGPD, whether additional costs or ignorance of the LGPD and how to implement it. The objective of the research is to analyze the level of comprehension of LGPD and establish connections between effective and inadequate practices. At first, students of undergraduate courses were consulted. As an initial contribution, factors related to LGPD have been identified, and they should be considered to promote safer development.

References

Araújo, E., Vilela, J., Silva, C., and Alves, C. (2021). Are my business process models compliant with lgpd? the lgpd4bp method to evaluate and to model lgpd aware business processes. In XVII Brazilian Symposium on Information Systems SBSI (2021).

Brasil (2018). Lei nº 13.709, de 14 de agosto de 2018. lei geral de proteção de dados pessoais (lgpd).

Canedo, E. D., Calazans, A. T. S., Masson, E. T. S., Costa, P. H. T., and Lima, F. (2020). Perceptions of ict practitioners regarding software privacy. Entropy, 22(4).

Castro, E., Silva, G. R. S., and Canedo, E. D. (2022). Ensuring privacy in the application of the brazilian general data protection law (lgpd). In Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing, SAC ’22.

Corbin, J. and Strauss, A. (2014). Basics of qualitative research: Techniques and procedures for developing grounded theory. Sage publications.

Ferreira, L., Okano, M. T., Aguiar, F., De Castro Lobo dos Santos, H., and Ursini, E. L. (2022). A panorama of the implementation of the general law for the protection of personal data (lgpd) in brazil: an exploratory survey. In 2022 IEEE 12th Annual Computing and Communication Workshop and Conference (CCWC), pages 0723–0729.

Rocha, L. D., Silva, G. R. S., and Dias Canedo, E. (2023). Privacy compliance in software development: A guide to implementing the lgpd principles. In Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC ’23, page 1352–1361.

Saraiva, J. and Soares, S. (2023a). Adoption of the lgpd inventory in the user stories and bdd scenarios creation. In Proceedings of the XXXVII Brazilian Symposium on Software Engineering, SBES ’23, page 416–421.

Saraiva, J. and Soares, S. (2023b). Privacy and security documents for agile software engineering: An experiment of lgpd inventory adoption. In 2023 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM).