GENERAL DATA PROTECTION REGULATION (GDPR): THE CHALLENGE OF ITS IMPLEMENTATION FOR HEALTH

In 2020, the General Data Protection Regulation (GDPR) came into force, which had been approved in 2018, with the purpose of promoting the protection of the personal data of all citizens in Brazil, affecting different sectors and services. In the present work, we aim at discussing the applicability of GDPR in the health sector, since this can be considered the sector with the most complex adaptation to this legislation, for working with sensitive data every moment. During the study, it was possible to detect situations in which, at the same time, the patient's information helps in their care, but it brings difficulties to conduct the adaptation to the law. The implementation of GDPR requires care and participation of the entire institution, compliance with good practices, structured and maintained by a governance that is concerned with safety standards, technical standards, educational actions, internal inspections, as well as mapping and risk mitigation actions.