GRPCOM implements LGPD project with PrivacyTools.
Grupo Paranaense de Comunicação implemented the data protection project with the support of the startup from Rio Grande do Sul.
The LGPD (General Data Protection Law) has been in force since August 2020 and will apply penalties from August 2021. With this, several companies are intensifying their care with the personal data of customers, employees and suppliers.
An example of this is the Grupo Paranaense de Comunicação (GRPCom), which began the adaptation process in 2020. "The initial estimated time was 9 to 12 weeks and we closed the diagnosis phase in 16 weeks, extending as a result of legislative changes, home office and other impacts of the pandemic”, explains Rita de Cácia de Medeiros, the organization's DPO (Data Protection Officer).
For the GRPCom, complying with the LGPD is much more than an obligation: it is a way to differentiate itself and improve the relationship with the audience. In total, there are many personal data processed, including the group's media outlets, which are Gazeta do Povo, the newspaper Tribuna, the RPC television channel, Rádio Mundo Livre, among others.
About the new law, Rita explains that the benefits of being in compliance are the “competitive edge, relationship with the data subject, reputation and good practices, thus, we believe that the LGPD is an opportunity”.
Data protection is a competitive differentiator
Each company has its own way of complying with the LGPD, depending on its size and level of maturity in relation to the topic. The first step, after the diagnosis phase and joining the action plans, was to structure the Internal governance, through the “privacy office” with people and definitions of responsibilities and scope, as well as sign the contracting of Privacy Tools.
"Thus, from our experience since the beginning of the work that took place in January 2020, we assessed that we needed to have a system that allowed for an integrated management with legal, process and technology standards, and Privacy Tools has been a great contribution in this journey , with an agile partnership and governance focused on compliance”, commented the Group's DPO.
The path taken by GRPCom
Then, the DPO/Data Processing Officer was appointed and a channel was created to serve the holders. The company's internal policies and approved technologies were also reviewed. Then, the processes were mapped to define the treatment hypotheses for each purpose.
According to Rita, “data protection is a project that has a beginning, middle and no end, it will need constant monitoring and Privacy Tools came to complete this data management in our companies.” The platform makes it possible to map the flows of personal data in the organization, manage online consents and holders' preferences. The platform has Data Mapping, Incident Management, service to holders, among other features.
About PrivacyTools
PrivacyTools is a PrivacyTech, that is, a startup in the field of privacy, accelerated by Obr.global and is one of the pioneers in Brazil in offering solutions for LGPD.
The company aims to transform the way companies protect and manage the privacy of personal data and has 150+ companies such as Rede D'or, Banco RCI, Pague Menos, São João Pharmacies, Bom Jesus Group, University of Fortaleza, Synnex Corporation, among others.
For press vehicles, PrivacyTools solutions help maintain the privacy of those who browse online articles, by managing cookies that are authorized by readers, writing Privacy Policies and mapping the data about users that are collected and used to recognize and minimize the risk of leakage or misuse of information.