Privacy protection in IoT devices according to LGPD

A comprehensive study

Abstract

The Internet of Things (IoT) has profoundly transformed human interaction with the environment by connecting physical devices and automating tasks that were once complex. However, this technological revolution also raises concerns about security and privacy, particularly in the handling of personal and sensitive data. The continuous growth in the adoption of IoT devices and systems underscores the need to reconcile this technology with specific regulations, such as the General Data Protection Law (LGPD). The challenge lies in the absence of explicit guidelines regarding the handling of data in IoT systems within existing legislations. This study aims to comprehend the coexistence of IoT with the LGPD, exploring solutions to ensure the security and privacy of data in a rapidly evolving technological landscape. The effectiveness of checklists in compliance verification, the proposal of the Personal Data Storage (PDS) in conjunction with IoT, and the application of Goal-Oriented Requirements Engineering techniques have been addressed. Furthermore, the practical implementation of PDS in the context of the Unified Health System (SUS) and the identification of functional and non-functional requirements for LGPD compliance in health IoT systems were discussed. The study highlights the importance of implementing LGPD principles in IoT, filling regulatory gaps, and promoting the security and privacy of data. The efficient coexistence of these elements not only meets legal requirements but also builds trust, empowering users with greater control over their data. Continuous innovations and practical research are essential to guide organizations, researchers, and policymakers in the pursuit of solutions that preserve data integrity in a connected environment.