General Data Protection Law and institutional repository: reflections and compliance

This article discusses the General Data Protection Law in the context of institutional repositories. It focuses on the necessary adjustments to be done. This study presents a brief overview of Brazilian legislation about privacy and data protection. This research is characterized as exploratory by its ends, bibliographic and documentary by its means, and it has a qualitative approach. The results demonstrates that the General Data Protection Law presents consistent guidelines and sanctions so that institutions can guarantee an adequate treatment and security of personal data. The repositories need to be adapted regarding data protection. The study proposes recommendations about processes and workflows, such as review of institutional documents, training, and transparency actions. This study concludes that discussions about privacy and protection of personal data need to be encouraged in society, including the repositories in this application scenario.