The LGPD - Personal Data Protection Law, its impacts on IT, and the compliance risks of FTP.
Law 13.709/2019 - LGPD, in effect from 2021, covers the rights of Brazilian citizens regarding the processing of their personal data, and the extent to which companies will need to adhere to the requirements of security, good practices, governance and compliance with the regulations of the competent authority.
The LGPD (Brazilian General Data Protection Law) impacts commercial and consumer relations due to the storage and processing of customer information by companies.
institutions. It will also have significant impacts on the IT environment,
with regard to data collection, processing, privacy and protection.
Compliance with the LGPD requires new investments in IT management, new
processes and technology requirements that have not yet been taken into account.
Considering aspects of personal data transfer, the standard IBM FTP (z/OS) clearly fails to comply with the LGPD (Brazilian General Data Protection Law).
It is mandatory to comply with basic requirements in data transfer, such as the use of secure protocols, SFTP or FTPS with strong ciphers, encrypted data, authentication, and auditing of these traffics.
While the secure transfer of personal data reflects an essential operational business process in IT, this service is also characterized as a risky activity in terms of LGPD compliance.
The VFTP-SSH solution addresses gaps and provides secure FTP on z/OS, facilitating compliance with regulatory standards such as the LGPD (Brazilian General Data Protection Law).
VFTP-SSH is a secure FTP solution with improved usability, SAF integration, and encryption. All in compliance with industry security policies.
Learn more about this topic through the links below: