A Methodology for Network Security Infrastructure according to the New Brazilian General Law for Personal Data Protection

Abstract

The General Law on Protection of Personal Data-LGPD (Law No. 13,709/2018) is a new Brazilian law that deals with the management of personal data of third parties, carried out by people, companies, and institutions. This legal provision requires that these data be protected by all necessary technical means, imposing a set of sanctions on the Organization. Due to the lack of a reference methodology for implementing the protection requirements defined in the Law, this work proposes one that provides a basis for constructing the network architecture supported by the most common models and applying a security policy to computer network infrastructures.