Do backup ao descarte: boas práticas no manuseio de equipamentos informáticos em conformidade com as diretrizes da Lei Geral de Proteção de Dados e da Política Nacional de Resíduos Sólidos

Abstract

This interdisciplinary study aimed to analyze best practices for the secure handling of Information Technology (IT) assets containing data storage devices, seeking to answer the question of which practices can be adopted to ensure the safe disposal of assets containing personal data, in compliance with the General Data Protection Law (LGPD), the National Solid Waste Policy (PNRS), and the International Organization for Standardization (ISO) 27000 family of standards, promoting both information security and environmental sustainability. The research consisted of a review of the scientific literature, covering publications in the databases of the CAPES Journal Portal, Google Scholar, and my library, focusing on recent studies that identify best practices for data disposal and sanitization in electronic equipment. The adopted methodology was descriptive, with a bibliographic and documentary review of applicable legislation and standards, as well as an analysis of data sanitization and disposal procedures for data-storing equipment. The bibliographic studies were compared with the guidelines established by the LGPD, the PNRS, and the collected data were qualitatively analyzed through documentary analysis, enabling an in-depth interpretation and the formulation of recommendations to improve disposal practices for these assets. As a result, a Best Practices Manual was developed as a guiding document aimed at enhancing the security of IT asset disposal and promoting sustainability. The study highlights the interconnection between information security and waste management, offering an integrated perspective on legal compliance and best practices for the proper handling of these assets.