Information Literacy in the Implementation of the General Data Protection Law in Small Organizations: Proposals for a Framework
Name: MONIKY COELHO
Publication date: 08/04/2026
Examining board:
Name |
Role |
|---|---|
| ELMIRA LUZIA MELO SOARES SIMEÃO | Examinador Externo |
| GLEICE PEREIRA | Examinador Interno |
| MARGARETE FARIAS DE MORAES | Presidente |
Summary: This dissertation investigates the intersection between the General Data Protection Law (LGPD) and Information Literacy (InfoLit) within the context of small organizations. The research problem lies in the difficulty of implementing legal privacy guidelines in
environments with limited resources, where compliance is frequently reduced to tech- nological aspects, neglecting the human factor. The general objective was to analyze how Information Literacy can act as a strategic tool for the effectiveness of the LGPD,
promoting an ethical and resilient data protection culture. Methodologically, the research is characterized as exploratory and bibliographic, adopting a qualitative approach to construct an integrative framework. This model articulates the principles of the LGPD and the security measures of the ISO/IEC 27001, 27002, and 27701 standards through the lens of the technical, aesthetic, ethical, and political dimensions of information literacy. As the main result, a Practical Guide is presented, structured into four operational stages: Capture and Classification; Treatment and Security; Maintenance and Transparency; and final destination. It is concluded that the protection of personal data in small companies depends on the transformation of the employee into a critical and conscious agent, with Information Science being the strategic field to mediate this integration between legal rigor and organizational practice.
