In the 2021 flight plan, Sabiá aimed to be one of the first companies in Brazil to have LGPD certification. After months of work together between the internal team and partners who were fundamental at each stage of this process, we achieved the “Gold Level Personal Data Protection” certification from Bureau Veritas Certification in April of this year.
The certification strengthens our team and our clients' commitment to the agency to build inspiring partnerships with transparency and responsibility.
Several criteria were evaluated, among them:
- Context and scope of action.
- Corporate Personal Data Protection Policy.
- Organizational functions and responsibilities.
- Measures adopted to comply with LGPD principles (purpose, necessity, adequacy, free access, quality, transparency, security, prevention, non-discrimination, and accountability/reporting).
- Legal bases for data collection and processing.
- Risk assessment methodology.
- Internal and external communication.
- Incident Management.
- Notifications.
- Contractual formalizations.
- Information security and technical infrastructure.
We thank our inspiring partners who supported us in this achievement!
Sharing learning:
Our certification process followed 6 practical steps. We share our learning with those starting their LGPD compliance journeys, hoping to contribute to an even better and more inspiring ecosystem.
Mobilize, involve, and communicate with everyone
We work with our internal team in.
2. Understanding the Law and its Impact on Business
We delved deeper into the law with training sessions to gain a better understanding of its requirements and how it impacts the business. In addition to fulfilling our legal obligation, we understand that among the benefits are risk mitigation and the opportunity for competitive differentiation in the market.
3. Process Design and Risk Map
We conducted a comprehensive inventory of all databases in our history. We structured flowcharts of the data processing involved in the agency's operations. Based on these processes, we established risk maps and actions to mitigate and correct them.
4. Management System for In and Out
We established a system to formalize management and sustain best practices in processes with consistency. We developed manuals and work instructions to have tools that are both robust and agile.
5. Technology as an ally
We rely on specific software to interface with data subjects and for maturity diagnostics. We also utilize information security practices and systems to protect the data we process.
6. Solid Contracts
We formalize our commitments with suppliers and clients in a transparent and balanced way, with responsibility and trust in our partnerships.
More on LGPD at Sabiá
Excerpt from our participation in the Unicamp Ventures Webinar in April/2021:
Abradi Article on Certification Achievement in May/2021: https://abradi.com.br/agencia-sabia-conquista-a-certificacao-lgpd-abradi-bureau-veritas/
Participation in the RD Station + Abradi training on LGPD:
