ESTUDO DE CASO SOBRE A LGPD E APLICAÇÃO NO INSTITUTO FEDERAL GOIANO CAMPUS CERES.

Abstract

This study analyzes the impacts of the implementation of the General Data Protection Law (LGPD) on the acquisitions sector of the Federal Institute of Goiás – Ceres Campus, considering the relevance of data protection as a fundamental right and the need for public institutions to comply with legal requirements. The research contextualizes the evolution of Brazilian privacy legislation, highlighting its principles, foundations, essential concepts, and security mechanisms. It also analyzes the internal rules of IF Goiano, such as the privacy program, the information security policy, and guidelines applied to purchasing and bidding processes. The methodology combines a literature and document review with a case study based on a questionnaire applied to employees in the sector, seeking to assess the level of institutional compliance, the practices adopted, and the challenges faced. The results indicate some progress, but reveal significant gaps that impact organizational maturity in data protection. The weaknesses identified are consistent with national diagnoses, such as the TCU report, which point to similar difficulties in public agencies. It is concluded that, despite positive initiatives, the consolidation of compliance with the LGPD requires continuous investment, strengthening of governance, expansion of training actions, and systematic incorporation of preventive and monitoring practices.