General Data Protection Law and information security in healthcare

Abstract

Objectives: descriptive and explanatory analysis of the General Data Protection Law, Law n. 13.709/2018, especially in the aspect of the right to health and its implications for the security of data processing resulting from the technological revolution. Methods: exploratory research of bibliographic and documentary character based on books, articles and documents. Results: the investigation showed that the widespread use of digital media in the area of health and medicine exposes the information holder (patient), either due to negligence in treatment, or due to improper commercialization or data leakage. Conclusion: the study points out that the qualified consent of the holder of sensitive data is essential for its treatment, as well as the use of secure digital systems as a means of safeguarding the fundamental rights of the person, alerting professionals and health institutions to the urgent need to comply with the General Data Protection Law.