Data processing

MODULE CONTENTS

This module looks in detail at the various personal data processing operations as defined by the GDPR, as well as the ten legal bases that frame their use. Participants will discover the essential legal bases, from individual consent to contract enforcement, privacy protection and legitimate business interest. This framework enables organizations to understand how to handle data in a legally compliant manner and avoid legal sanctions.

LEARNING OBJECTIVES

  • Identify personal data processing operations under the GDPR.
  • Discover the 10 legal bases for data processing
  • Know when and how to apply these legal bases in day-to-day activities
  • Learn best practices for obtaining and managing consent
  • Understand the legal implications of each basis and the associated rights of data subjects

Data processing under the LGPD

The processing of personal data is at the heart of the LGPD legislation, which governs any operation related to personal information, be it collection, storage, dissemination or deletion. This module explains in detail how the LGPD defines data processing and highlights the importance of compliance with this law.

All data processing must comply with one of the ten legal bases set out in the GDPR, which include:

  1. The performance or negotiation of a contract;
  2. A legal or regulatory obligation ;
  3. The protection of life or physical integrity;
  4. The legitimate interest of the company, under certain conditions;
  5. The implementation of public policies;
  6. The free and informed consent of the individual concerned;
  7. Studies carried out by research organizations;
  8. The exercise of rights under legal proceedings;
  9. Health protection by authorized professionals;
  10. credit protection.

The importance of consent is particularly emphasized in this module: it must be obtained separately from the general terms and conditions, easily retractable, and recorded as proof of its validity. These principles are essential to ensure legal compliance and avoid financial penalties, while respecting the rights of individuals.