Data management in micro and small companies: Compliance with the general data protection law
DOI:
https://doi.org/10.5007/2175-8077.2023.e82226Keywords:
General Data Protection Law, Degree of compliance, Data protection, Micro and small companiesAbstract
In order to understand the impact of personal data on micro and small companies (MSEs), this research aimed to investigate the degree of compliance of these in relation to the requirements set forth in the Brazilian General Data Protection Law / LGPD. The objective was to verify whether MSEs are preparing to meet the requirements of the LGPD. The approach of this research is phenomenological, of a quali-quanti character. Of the three hypotheses tested, only one was confirmed, showing that the proportion of non-compliance, considering the factor “conclusion of personal data processing”, is significantly higher than compliance. Based on the results found, it is possible to state that the MSEs in the studied sample are concerned with the protection of personal data. However, their preparation is still incipient. In a practical way, it is suggested the adoption of the Data Life Cycle to map the business processes. From a theoretical point of view, this research sought to address the gap in technological and human skills of companies when dealing with the complexity of the digital world and its regulation, evidenced by the increase in digital commerce.
References
Alves, G. (2020). Ciclo de Vida dos Dados e LGPD. Xpositum: Consultoria empresarial. https://www.xpositum.com.br/ciclo-de-vida-dos-dados-e-lgpd.
Ben-Zvi, T., & Luftman, J. (2022). Post-Pandemic IT: Digital Transformation and Sustainability. Sustainability, 14(22), 15275. https://doi.org/10.3390/ su142215275
Bezerra, M. R. B. (2019). Autoridade nacional de proteção de dados pessoais: a importância do modelo institucional independente para a efetividade da lei. Caderno Virtual, 2(44), 1-95.
Bioni, B. R. (2019). Proteção de dados pessoais: a função e os limites do consentimento. Rio de Janeiro: Editora Forense.
Branco, S. (2020). As hipóteses de aplicação da LGPD e as definições legais. In: Mulhollan, C. (org). A LGPD é o novo marco normativo no Brasil. São Paulo: Editora Arquipélago.
Brasil (2019). Decreto nº 9.936, de 24 de julho de 2019. Regulamenta a Lei nº 12.414, de 9 de junho de 2011, que disciplina a formação e a consulta a bancos de dados com informações de adimplemento, de pessoas naturais ou de pessoas jurídicas, para formação de histórico de crédito. Brasília. http://www.planalto.gov.br/ccivil_03/_Ato2019-2022/2019/Decreto/D9936.htm
Brasil (2020). Lei Geral de Proteção de Dados: Guia de boas práticas para implementação na administração pública federal. https://www.gov.br/governodigital/pt-br/governanca-de-dados/guia-lgpd.pdf
Brasil (2018). Lei nº. 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília. http://www.planalto.gov.br/ccivil_03/_Ato2015-2018/2018/Lei/L13709.htm
Cantner, U., Cunningham, J. A., Lehmann, E. E., & Menter, M. (2021). Entrepreneurial ecosystems: a dynamic lifecycle model. Small Bus Econ, 57, 407-423. https://doi.org/10.1007/s11187-020-00316-0
Cavalcanti, N. P., & Santos, L. M. S. B. (2018). A lei geral de proteção de dados do Brasil na era do big data. In Tecnologia Jurídica e Direito Digital - II Congresso Internacional de Direito, Governo e Tecnologia, 2. Belo Horizonte: Fórum, 1, 351-366.
Chiarini, A., & Compagnucci, L. (2022). Blockchain, Data Protection and P2P Energy Trading: A Review on Legal and Economic Challenges. Sustainability, 14(23), 16305. https://doi.org/10.3390/su142316305
Choo, C. W. (2003). A organização do conhecimento: como as organizações usam a informação para criar significado, construir conhecimento e tomar decisões. São Paulo: ed. SENAC São Paulo.
Costa, I.M., Alves Junior, P. N., Queiroz, G. A., Yushimito, W., & Pereira, J. (2023). Do We Consider Sustainability When We Measure Small and Medium Enterprises’ (SMEs’) Performance Passing through Digital Transformation? Sustainability, 15(6), 4917. https://doi.org/10.3390/su15064917
Creswell, J. W. (2010). Projeto de pesquisa: métodos qualitativo, quantitativo e misto. (3. ed.) Porto Alegre: Artmed.
Da Cruz, U. L., Passaroto, M., Junior, N. T. (2021). O impacto da Lei Geral de Proteção de Dados Pessoais (LGPD) nos escritórios de contabilidade. ConTexto - Contabilidade em Texto, 21(49), 30-39. https://seer.ufrgs.br/index.pHc/ConTexto/article/view/112561
DAMA-Data Administration Management Association. (2010). The DAMA guide to the data management body of knowledge: DAMA-DMBOK guide. Bradley Beach, NJ.: Technics Publications, LLC.
De Sordi, J.O. (2017). Desenvolvimento de projeto de pesquisa. São Paulo: Saraiva.
Derbli, L.S. (2019). O transplante jurídico do regulamento geral de proteção de dados da União Europeia (“GDPR”) para o direito brasileiro. E-legis, 30, 181-193. https://doi.org/10.51206/e-legis.v12i30.500
Doneda, D. (2011). A proteção dos dados pessoais como um direito fundamental. Espaço Jurídico, 12(2), 91-108.
Gil, A.C. (2017). Como elaborar projetos de pesquisa. (6 ed.). São Paulo: Atlas.
ITRC. (2023). Identity Theft Resource Center’s 2022 Annual Data Breach Report Reveals Near-Record Number of Compromises. https://www.idtheftcenter.org/post/2022-annual-data-breach-report-reveals-near-record-number-compromises/
Johansen, J. (2023). Expert opinions on making GDPR usable. Human Factors in Privacy Research (p. 137-152). Springer Book. https://doi.org/10.48550/arXiv.2308.08287
Kádáróvá, J., Lachvajderová, L., & Sukopová, D. (2023). Impact of Digitalization on SME Performance of the EU27: Panel Data Analysis. Sustainability, 15, 9973. https://doi.org/10.3390/su15139973
Kumara, I., Kayes, A., Mundt, P., & Schneider, R. (2023). Data Governance. Data Science for Entrepreneurship, 37-62. https://doi.org/10.1007/978-3-031-19554-9_3
Lima, J. F.; Silva, G. (2019). Desafios para inovar na micro e pequena empresa. Revista da Micro e Pequena Empresa,13(2), 85-97. https://doi.org/10.21714/19-82-25372019v13n2p8597
Machado, H. P. V. (2018). Configuração de estudos sobre gestão do conhecimento em pequenas empresas no brasil. Perspectivas em Gestão & Conhecimento, 8(3), 209-227. https://doi.org/10.21714/2236-417X2018v8n3p209
Marconi, M. A., & Lakatos, E. M. (2017). Fundamentos de metodologia científica. (8. ed.) São Paulo: Atlas.
Martin, K. D., Borah, A., & Palmatier, R. W. (2017). Data Privacy: Effects on Customer and Firm Performance. Journal of Marketing, (81), 1. 36-58. http://dx.doi.org/10.1509/jm.15.0497
Molina, L. G., & Santos, J.C. (2020). Gestão da informação e a 4a Revolução Industrial. AtoZ: novas práticas em informação e conhecimento, 8 (2), p. 39-48. http://dx.doi.org/10.5380/atoz.v8i2.65784
Oliveira, A.P., Zanetti, D., Lima, F. S. & Sampaio, T. O. (2019). A LGPD brasileira na prática empresarial. Revista Jurídica da Escola Superior de Advocacia da OAB-PR, ano 4(1), 172-200.
Oliveira, T. P. P., & Saraiva, P.M. (2019) A influência do marketing digital no perfil de consumo da geração y. Id on Line Revista Multidisciplinar e de Psicologia, 13 (44), 589-600. https://doi.org/10.22533/at.ed.16719060720
Parlamento Europeu. (2020). The CJEU judgment in the Schrems II case. https://www.europarl.europa.eu/RegData/etudes/ATAG/2020/652073/EPRS_ATA(2020)652073_EN.pdf
Pelloso Piurcosky, F., Aparecido Costa, M., Frogeri, R. F., & Leal Calegario, C. L. (2019). A LGPD pessoais em empresas brasileiras: uma análise de múltiplos casos. Suma de negócios, 10(23), 89-99. https://doi.org/10.14349/sumneg/2019.v10.n23.a2
Rahul, K., & Banyal, R. K. (2020). Data life cycle management in big data analytics. Procedia Computer Science, 173, 364-371. https://doi.org/10.1016/j.procs.2020.06.042
Ramos, L. C. P., & Gomes, A.V.M. (2019). Lei geral de proteção de dados pessoais e seus reflexos nas relações de trabalho. Scientia Iuris, 23(2), 127-146. https://doi.org/10.5433/2178-8189.2019v23n2p127
Rodrigues, M., Franco, M., Silva, R., & Oliveira, C. (2021). Success Factors of SMEs: Empirical Study Guided by Dynamic Capabilities and Resources-Based View. Sustainability, 13, 12301. https://doi.org/10.3390/su132112301
Russ, M. (2021). Knowledge Management for Sustainable Development in the Era of Continuously Accelerating Technological Revolutions: A Framework and Models. Sustainability, 13, 3353. https://doi.org/10.3390/su13063353
Sant’Ana, R. C. G. (2016). Ciclo de vida dos dados: uma perspectiva a partir da ciência da informação. Informação & Informação, 21(2), 116-142. https://doi.org/10.5433/1981-8920.2016v21n2p116
Serumaga-Zake, J. M., & Van Der Poll, J. A. (2021). Addressing the Impact of Fourth Industrial Revolution on South African Manufacturing Small and Medium Enterprises (SMEs). Sustainability, 13, 11703. https://doi.org/10.3390/su132111703
Silveira, M. A., & Becaro, T. C. (org). (2014). Competitividade com qualidade de vida: o capital humano como fator de produção. Campinas: ed. CEDET.
Solomon, G. T., & Linton, J. D. (2016). Standing at the crossroad of knowledge: Technology, innovation, entrepreneurship and the small business management - Policy perspectives. Technovation, 57–58, 1-3. https://doi.org/10.1016/j.technovation.2016.08.003
União Europeia. (2021). Proteção de dados na UE. https://commission.europa.eu/law/law-topic/data-protection/data-protection-eu_pt
Vieira, S. (2011). Estatística básica. Rio de Janeiro: ed. Cengage.
Vrontis, D., Chaudhuri, R., & Chatterjee, S. (2022). Adoption of Digital Technologies by SMEs for Sustainability and Value Creation: Moderating Role of Entrepreneurial Orientation. Sustainability, 14(13). https://doi.org/10.3390/su14137949
Wang, Z., Lin, S., Chen, Y., Lyulyov, O., & Pimonenko, T. (2023). Digitalization Effect on Business Performance: Role of Business Model Innovation. Sustainability, 15(11). https://doi.org/10.3390/su1511902
Zeng, S. & Yang, H. (2023).A Bibliometric and Visualization Analysis of Knowledge Mapping in Digital Economy Research, 1992–2022. Sustainability , 15, 6565. https://doi.org/10.3390/su15086565
Ziegler, S., Evequoz, E., & Huamani, A. M. P. (2019). The impact of the European General Data Protection Regulation (GDPR) on future data business models: Toward a new paradigm and business opportunities. In: Aagaard, A. (ed.). B2B Digital business models. Palgrave Macmillan, Cham, Gewerbestrasse, Switzerland. https://doi.org/10.1007/978-3-030-13005-3_9
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2023 Revista de Ciências da Administração
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
The author must ensure:
- that there is complete consensus among all co-authors to approve the final version of the paper and its submission for publication.
- that their work is original, and if the work and/or words of others have been used, these have been duly acknowledged.
Plagiarism in all its forms constitutes unethical publishing behavior and is unacceptable. RCA reserves the right to use software or any other methods of plagiarism detection.
All submissions received for evaluation in the RCA journal are screened for plagiarism and self-plagiarism. Plagiarism identified in manuscripts during the evaluation process will result in the submission being archived. In the event of plagiarism being identified in a manuscript published in the journal, the Editor-in-Chief will conduct a preliminary investigation and, if necessary, retract it.
Authors grant RCA exclusive rights of first publication, with the work simultaneously licensed under the Creative Commons (CC BY) 4.0 International License.
Authors are authorized to enter into separate, additional contractual arrangements for the non-exclusive distribution of the version of the work published in this journal (e.g., publishing in an institutional repository, on a personal website, publishing a translation, or as a chapter in a book), with an acknowledgement of its authorship and initial publication in this journal.
This license grants any user the right to:
Share – copy, download, print, or redistribute the material in any medium or format.
Adapt – remix, transform, and build upon the material for any purpose, even commercially.
According to the following terms:
Attribution – You must give appropriate credit (cite and reference), provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
No additional restrictions – You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
