Skip to main content

*By João Santos

Given the moment we live in, responsibility and data security is of utmost importance and relevance. In this way, the search for alternatives that are efficient, transparent and safe are presented through various technologies with this capacity. Currently the Blockchain is on the agenda among the possible alternatives for troubleshooting and data privacy.

The privacy of personal data and the use of technology Blockchain They are related. This technology is seen for the future working in civil records, banking transactions, sales made through e-commerces, among others, allowing activities to be carried out with less bureaucracy, lower cost and providing greater reliability and security.


O blockchain can be defined as a data structure. This structure is implemented in a decentralized architecture where all the points present in a network have, in an encrypted form, all the information. Whenever a new “transaction” is performed or information is stored, the network members themselves validate whether the new information is consistent with what previously existed, excluding the need for an intermediary to validate this information.

It is also worth mentioning that, after information is recorded, it cannot be altered or destroyed. This aspect of technology blockchain has been the subject of several debates and discussions on how systems operated using this technology will survive in an era in which the protection of personal data is regulated by general rules and laws, as is the case in Europe It's in Brazil.


Covering the technology parts blockchain, it is possible to identify some advantages in its use. Its use allows users more transparency, anonymity, integrity in the data used and greater trust in relation to digital transactions, due to its “database”. The technology does not have any kind of “central point” to store the information, thus making it difficult for any third party to modify/change any existing data.

Currently, the biggest disadvantage in using the blockchain is present in its relationship with the General Data Protection Law.


The critics of blockchain point to the urgent need for greater specific regulation on network-operated technology operations, so that the rights established in the LGPD (General Data Protection Law) can be enforced, or the creation of a body for the control and inspection of data. The cryptographic keys end up becoming contradictory to what is proposed by the law, because the blockchain it is a decentralized service unlike what the LGPD preaches, the detailed control of data. However, it must be considered that the technology blockchain contributes to the management of the life/death cycle of data within an organization as established by the LGPD.


The trust models most used today are based on a central trusted entity such as banks that control financial transactions. Differently, the blockchain presents a paradigm shift because it is a distributed model and ensuring reliability in data “transactions”.

The use of technology is formed mostly by cryptocurrencies, but it is possible to find other activities that the blockchain can play.

  • Value transfers between companies/companies and countries can benefit from the agility in the speed of transactions using the blockchain;
  • The replacement of intermediaries in the stock purchase/sale market;
  • The use of technology replacing forms of authentication for transactions, enabling integrity and transparency.

— João Santos is Trainee II GRC at [SAFEWAY]

How can we help?

THE SAFEWAY is an Information Security consulting company recognized by its clients for offering high value-added solutions through projects that fully meet the needs of the business. In 14 years of experience, we have accumulated several successful projects that have earned us credibility and prominence with our clients, who largely make up the 100 largest companies in Brazil.

today through 25 strategic partnerships with global manufacturers and our SOC, SAFEWAY is considered a one stop shopping with the best solutions in technology, processes and people. We have both the technical skills and the experience necessary to assist your company in the process of structuring controls and preparing the environment for the implementation of an ISMS, SGS or SGCN and, consequently, certification of operations, services or companies to the ISO27001, ISO20000 or ISO22301 standards.

In order to support companies in this process of evaluation and adaptation to the requirements of the LGPD, [SAFEWAY] has in its portfolio of services, the Cybersecurity Health Check whose objective is to carry out a diagnosis of the CyberSecurity, Information Security and Data Privacy implemented in your company, contemplating the pillars of Law SuitPeople and Technology.

through the Cybersecurity Health Check, risks associated with information security and privacy of internal processes and activities are identified, existing controls and new controls evaluated according to the size of your organization to increase the level of maturity and compliance, in accordance with good information security practices. If you would like more information, contact one of our experts!