Natalia Vieira Dantas, Ana Paula Henriques de Gusmão, Marcella Teixeira Gonzaga
{"title":"支持有关数据保护遵从性的决策的多标准模型","authors":"Natalia Vieira Dantas, Ana Paula Henriques de Gusmão, Marcella Teixeira Gonzaga","doi":"10.1080/12460125.2023.2263683","DOIUrl":null,"url":null,"abstract":"ABSTRACTWith the advent of the General Personal Data Protection Law (LGPD) in Brazil, companies need to adapt to the law and, therefore, must identify weaknesses in relation to the protection of personal data. Next, actions are defined that include investments in technology, infrastructure and training. These actions require resources, either for the implementation of some technology or readjustment of the system, time for implementation, restructuring of processes, and involvement of key people. Considering these actions can also impact the organizational strategy, this work proposes a model to support the prioritization of actions necessary to comply with the LGPD. The model is based on the FITradeoff (Flexible and Interactive Tradeoff) multicriteria method. The proposed model was applied in a Brazilian organization that is adapting to the LGPD and needed formal support in relation to decisions. The recommendations obtained demonstrated alignment with the company's needs and strategies.KEYWORDS: Data protection; compliancemulticriteria decisionfitradeoff AcknowledgmentsThe authors would like to acknowledge the National Council for the Improvement of Higher Education (CAPES) and the Brazilian Research Council (CNPq) Brazilian National Research Council (CNPq), under Grant 311197/2020-5, for the support received to develop this research.Disclosure statementNo potential conflict of interest was reported by the author(s).","PeriodicalId":45565,"journal":{"name":"Journal of Decision Systems","volume":"5 1","pages":"0"},"PeriodicalIF":2.8000,"publicationDate":"2023-09-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"A multicriteria model to support decisions regarding data protection compliance\",\"authors\":\"Natalia Vieira Dantas, Ana Paula Henriques de Gusmão, Marcella Teixeira Gonzaga\",\"doi\":\"10.1080/12460125.2023.2263683\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"ABSTRACTWith the advent of the General Personal Data Protection Law (LGPD) in Brazil, companies need to adapt to the law and, therefore, must identify weaknesses in relation to the protection of personal data. Next, actions are defined that include investments in technology, infrastructure and training. These actions require resources, either for the implementation of some technology or readjustment of the system, time for implementation, restructuring of processes, and involvement of key people. Considering these actions can also impact the organizational strategy, this work proposes a model to support the prioritization of actions necessary to comply with the LGPD. The model is based on the FITradeoff (Flexible and Interactive Tradeoff) multicriteria method. The proposed model was applied in a Brazilian organization that is adapting to the LGPD and needed formal support in relation to decisions. The recommendations obtained demonstrated alignment with the company's needs and strategies.KEYWORDS: Data protection; compliancemulticriteria decisionfitradeoff AcknowledgmentsThe authors would like to acknowledge the National Council for the Improvement of Higher Education (CAPES) and the Brazilian Research Council (CNPq) Brazilian National Research Council (CNPq), under Grant 311197/2020-5, for the support received to develop this research.Disclosure statementNo potential conflict of interest was reported by the author(s).\",\"PeriodicalId\":45565,\"journal\":{\"name\":\"Journal of Decision Systems\",\"volume\":\"5 1\",\"pages\":\"0\"},\"PeriodicalIF\":2.8000,\"publicationDate\":\"2023-09-30\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of Decision Systems\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1080/12460125.2023.2263683\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"OPERATIONS RESEARCH & MANAGEMENT SCIENCE\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Decision Systems","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1080/12460125.2023.2263683","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"OPERATIONS RESEARCH & MANAGEMENT SCIENCE","Score":null,"Total":0}
引用次数: 0
摘要
摘要随着巴西《通用个人数据保护法》(LGPD)的出台,企业需要适应法律,因此,必须找出与个人数据保护有关的弱点。接下来,定义行动,包括对技术、基础设施和培训的投资。这些行动需要资源,要么用于实施某些技术,要么需要重新调整系统,需要时间来实施,需要重组过程,需要关键人员的参与。考虑到这些行动也会影响组织战略,本工作提出了一个模型,以支持遵守LGPD所需行动的优先次序。该模型基于fitradoff (Flexible and Interactive Tradeoff)多准则方法。提议的模型已在一个巴西组织中应用,该组织正在适应LGPD,需要在决策方面得到正式支持。获得的建议与公司的需求和战略一致。关键词:数据保护;作者要感谢国家高等教育改进委员会(CAPES)和巴西研究委员会(CNPq)巴西国家研究委员会(CNPq)在赠款311197/2020-5下为开展本研究提供的支持。披露声明作者未报告潜在的利益冲突。
A multicriteria model to support decisions regarding data protection compliance
ABSTRACTWith the advent of the General Personal Data Protection Law (LGPD) in Brazil, companies need to adapt to the law and, therefore, must identify weaknesses in relation to the protection of personal data. Next, actions are defined that include investments in technology, infrastructure and training. These actions require resources, either for the implementation of some technology or readjustment of the system, time for implementation, restructuring of processes, and involvement of key people. Considering these actions can also impact the organizational strategy, this work proposes a model to support the prioritization of actions necessary to comply with the LGPD. The model is based on the FITradeoff (Flexible and Interactive Tradeoff) multicriteria method. The proposed model was applied in a Brazilian organization that is adapting to the LGPD and needed formal support in relation to decisions. The recommendations obtained demonstrated alignment with the company's needs and strategies.KEYWORDS: Data protection; compliancemulticriteria decisionfitradeoff AcknowledgmentsThe authors would like to acknowledge the National Council for the Improvement of Higher Education (CAPES) and the Brazilian Research Council (CNPq) Brazilian National Research Council (CNPq), under Grant 311197/2020-5, for the support received to develop this research.Disclosure statementNo potential conflict of interest was reported by the author(s).