Loading...
Publication
Uma abordagem computacional e jurídica na gestão de consentimentos para o processamento de dados pessoais
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 3.09 MB | Adobe PDF |
Abstract(s)
A presente dissertação propõe uma abordagem que combina o Direito e a Computação, como forma
de repensar e otimizar o atual processo de recolha, gestão e validação de consentimento para o
tratamento de dados pessoais em ambiente digital, no enquadramento jurídico do Regulamento
Geral sobre a Proteção de Dados (RGPD).
Nessa senda, apresentamos uma reflexão sobre o conceito e evolução do consentimento, enquanto
fundamento de licitude do tratamento à luz do RGPD e a expressão deste no direito na
autodeterminação informacional do indivíduo. Balizamos as fragilidades, como a fadiga do
consentimento, opacidade, fragmentação informacional, com uma análise critica pelo
enquadramento jurídico, jurisprudência e orientações relevantes, que demonstraram que
consentimento, tal como se apresenta atualmente, se apresenta desvirtuado da livre manifestação
de vontade e com isso se mostra comprometida a soberania do individuo na tutela do direito
informacional.
Em resposta a esta problemática é proposto neste trabalho a conceção um modelo conceptual de
arquitetura computacional para uma plataforma de gestão centralizada de consentimento, assente
em princípios de privacy by design, interoperabilidade e segurança, integrando mecanismos de
pseudonimização, hashing, rastreabilidade e registo imutável, como garantia de validade jurídica,
transparência e auditabilidade.
Verificou-se que a solução proposta se apresenta como tecnicamente robusta e centrada no titular
dos dados em reforço da sua autodeterminação, servindo o cumprimento do RGPD e possibilitando a
inclusão futura de organizações e entidades responsáveis pela fiscalização e cumprimento do RGPD.
This dissertation proposes an approach that combines Law and Computing as a way of rethinking and optimizing the current process of collecting, managing, and validating consent for the processing of personal data in a digital environment, within the legal framework of the GDPR. In this vein, we present a reflection on the concept and evolution of consent as the basis for the lawfulness of processing in light of the GDPR and its expression in the law on the individual's informational self-determination. We highlight weaknesses, such as consent fatigue, opacity, and informational fragmentation, with a critical analysis of the legal framework, case law, and relevant guidelines, which have shown that consent, as it currently stands, is distorted from the free expression of will and thus compromises the sovereignty of the individual in the protection of informational rights. n response to this problem, this paper proposes the design of a conceptual model of computational architecture for a centralized consent management platform, based on the principles of privacy by design, interoperability, and security, integrating mechanisms of pseudonymization, hashing, traceability, and immutable registration, as a guarantee of legal validity, transparency, and auditability. The proposed solution has been found to be technically robust and focused on the data subject, reinforcing their self-determination, complying with the GDPR, and enabling the future inclusion of organizations and entities responsible for supervising and enforcing the GDPR.
This dissertation proposes an approach that combines Law and Computing as a way of rethinking and optimizing the current process of collecting, managing, and validating consent for the processing of personal data in a digital environment, within the legal framework of the GDPR. In this vein, we present a reflection on the concept and evolution of consent as the basis for the lawfulness of processing in light of the GDPR and its expression in the law on the individual's informational self-determination. We highlight weaknesses, such as consent fatigue, opacity, and informational fragmentation, with a critical analysis of the legal framework, case law, and relevant guidelines, which have shown that consent, as it currently stands, is distorted from the free expression of will and thus compromises the sovereignty of the individual in the protection of informational rights. n response to this problem, this paper proposes the design of a conceptual model of computational architecture for a centralized consent management platform, based on the principles of privacy by design, interoperability, and security, integrating mechanisms of pseudonymization, hashing, traceability, and immutable registration, as a guarantee of legal validity, transparency, and auditability. The proposed solution has been found to be technically robust and focused on the data subject, reinforcing their self-determination, complying with the GDPR, and enabling the future inclusion of organizations and entities responsible for supervising and enforcing the GDPR.
Description
Keywords
Consentimento proteção de dados RGPD segurança informática arquitetura computacional