Abstract:
It has been in force in Brazil since 2020, Law No. 13,709, of August 14, 2018 - General Data Protection Law, and the National Data Protection Authority began to disclose the list of sanctioning processes of companies and public institutions after March 2023. Based on these first proceedings initiated by the General Inspection Coordination, this research sought to analyze, from the perspective of information management, how the information on infractions, incidents, and any sanctions applied or applicable, as well as the main legal characteristics of the institutions fined, could contribute to the preparation and improvement of the Personal Data Protection Impact Report of the Federal University of Santa Catarina Telehealth Centers. The research has a qualitative approach, exploratory and descriptive objectives. It aims to analyze the practices related to the Law at the Telehealth Center and propose improvements based on the mapping of the administrative sanctioning processes initiated by the National Authority, as well as, from there, to identify the profile of the treatment agents investigated, as well as the main causes of assessment. Of the nine processes in 2023, three are from health institutions and the conduct indicates failures in the adoption of administrative or management security measures. Such information contributes to analyses relevant to Telehealth. The study contributes to changing the Report's flowchart, inserting a risk analysis step through process information, a viable perspective only with the application of knowledge in information management.
Keywords:
General Data Protection Law; impact report; telehealth; administrative sanctions