Loading...
Publication
Implementação do Regulamento Geral sobre a Proteção de Dados em gestão de pessoas : o caso da Nors, S.A.
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 532.79 KB | Adobe PDF |
Authors
Abstract(s)
A proteção de dados assume uma importância cada vez mais crucial na sociedade contemporânea, marcada pela proliferação de tecnologias digitais e pela crescente dependência de informação. No âmbito empresarial, esta proteção assume uma relevância ainda mais significativa, sendo que a sua implementação contribui para reforçar a confiança dos clientes e parceiros; mitigar riscos e sanções; e aumentar a eficiência e produtividade. O presente trabalho tem como objetivo perceber, na área de gestão de pessoas, quais são as fases da implementação do Regulamento Geral sobre a Proteção de Dados (RGPD), quais são os desafios enfrentados nessa implementação, quais são as vantagens e, por fim, quais são as oportunidades de melhoria nos processos de proteção de dados. O interesse neste tema surgiu no contexto de um estágio realizado na área de gestão de pessoas da Nors, S.A. De forma a responder a este conjunto de questões de investigação, foi realizado um estudo de caso sobre a implementação do RGPD no Grupo Nors. O estudo teve por base entrevistas semiestruturadas e documentos cedidos pela organização. A análise dos dados recolhidos permitiu concluir que a implementação do RGPD no Grupo Nors, organizada através de um processo planeado em várias fases, trouxe aspetos positivos, mas também negativos, no quotidiano da empresa. No que concerne aos benefícios, a implementação trouxe uma maior proteção aos dados pessoais dos colaboradores; impulsionou a mudança em certos processos antiquados e diminuiu o risco inerente à falta de proteção de dados. Por outro lado, o decorrer do levantamento dos dados e processos associados ao RGPD foi caracterizado pela grande dimensão da base de dados de clientes, repleta de informações pessoais, que dificultou e atrasou este processo. Adicionalmente foi percecionado que não existe nenhum programa que fosse capaz de lidar com as exigências deste regulamento. Para além disso, concluiu-se que existem algumas lacunas nos procedimentos que visam salvaguardar os dados pessoais, que há que solucionar, nomeadamente aquando da realização da admissão do colaborador, já que todos os dados pessoais requeridos para a realização do contrato de trabalho revertem para formato de papel e o seu nível de segurança diminui, uma vez que ficam ao dispor de “qualquer um".
Data protection assumes an increasingly crucial importance in contemporary society, marked by the regulation of digital technologies and growing dependence on information. In the business sphere, this protection assumes even more significant relevance, with its implementation helping to reinforce the trust of customers and partners; mitigate risks and assessments; and increase efficiency and productivity. The present work aims to understand, in the area of people management, what are the phases of implementing the General Data Protection Regulation (GDPR), what are the challenges faced in this implementation, what are the advantages and, finally, what are the opportunities for improvement in data protection processes. The interest in this topic arose in the context of an internship carried out in the people management area of Nors, S.A. To answer this set of research questions, a case study was carried out on the implementation of the GDPR in the Nors Group. The study was based on semi-structured interviews and documents provided by the organization. The analysis of the data collected allowed us to conclude that the implementation of the GDPR, organized through a planned process in several phases, brought positive, but also negative, aspects to the company's daily life. With regard to benefits, the implementation brought greater protection to employees' personal data; it drove change in certain antiquated processes and reduced the risk caused by a lack of data protection. On the other hand, the collection of data and processes associated with the GDPR was characterized by a gigantic customer database full of personal information that made this process difficult and delayed. Additionally, it was noticed that there is no program that is capable of dealing with the criteria of this regulation. Furthermore, we concluded that there are some gaps in the procedures aimed at the security of personal data, which must be resolved, namely, when the employee is hired, all personal data necessary for the execution of the employment contract reverts to paper format and their level of security decreases since they are at the mercy of “anyone”.
Data protection assumes an increasingly crucial importance in contemporary society, marked by the regulation of digital technologies and growing dependence on information. In the business sphere, this protection assumes even more significant relevance, with its implementation helping to reinforce the trust of customers and partners; mitigate risks and assessments; and increase efficiency and productivity. The present work aims to understand, in the area of people management, what are the phases of implementing the General Data Protection Regulation (GDPR), what are the challenges faced in this implementation, what are the advantages and, finally, what are the opportunities for improvement in data protection processes. The interest in this topic arose in the context of an internship carried out in the people management area of Nors, S.A. To answer this set of research questions, a case study was carried out on the implementation of the GDPR in the Nors Group. The study was based on semi-structured interviews and documents provided by the organization. The analysis of the data collected allowed us to conclude that the implementation of the GDPR, organized through a planned process in several phases, brought positive, but also negative, aspects to the company's daily life. With regard to benefits, the implementation brought greater protection to employees' personal data; it drove change in certain antiquated processes and reduced the risk caused by a lack of data protection. On the other hand, the collection of data and processes associated with the GDPR was characterized by a gigantic customer database full of personal information that made this process difficult and delayed. Additionally, it was noticed that there is no program that is capable of dealing with the criteria of this regulation. Furthermore, we concluded that there are some gaps in the procedures aimed at the security of personal data, which must be resolved, namely, when the employee is hired, all personal data necessary for the execution of the employment contract reverts to paper format and their level of security decreases since they are at the mercy of “anyone”.
Description
Keywords
RGPD Gestão de pessoas Proteção de dados Digitalização GDPR People management Data protection Digitization