O regime de responsabilidade civil do controlador e do operador à luz da Lei Geral de Proteção de Dados Pessoais
Carregando...
Data
2021-12-14
Tipo de documento
Monografia
Título da Revista
ISSN da Revista
Título de Volume
Área do conhecimento
Ciências Sociais Aplicadas
Modalidade de acesso
Acesso fechado
Editora
Autores
Teixeira, Helber Anastácio
Orientador
Messaggi, Reginaldo
Coorientador
Resumo
O presente trabalho visa compreender os pontos de vista acerca do regime jurídico da responsabilidade civil do controlador e do operador no âmbito da Lei Geral de Proteção de Dados Pessoais. Para tanto, utiliza-se a pesquisa documental e bibliográfica, tendo como fontes livros, publicações de revistas, artigos, legislação e jurisprudência. A pesquisa demonstra os principais conceitos da LGPD, bem como aborda o histórico da responsabilidade civil no ordenamento jurídico brasileiro, seus elementos e os regimes jurídicos. Por fim, analisa as doutrinas acerca do tema a fim de buscar suas interpretações sobre a lei em comento no que concerne à responsabilização dos agentes de tratamento, bem como estuda a jurisprudência dos tribunais para verificar possíveis entendimentos que serão utilizados em decisões futuras. Como resultado, observou-se que há uma considerável divergência doutrinária a respeito do tema, havendo autores que entendem pelo regime objetivo e outros pelo regime subjetivo. Na análise jurisprudencial, ficou evidenciado que o Superior Tribunal de Justiça (STJ) trata do tema em um sentido mais amplo e há bastante tempo, seus julgados demonstram uma preocupação com a pessoa do titular de dados em vários aspectos. O Tribunal de Justiça do Estado de São Paulo (TJSP), apesar de não contar com muitos julgamentos a respeito do tema, já demonstrou uma posição de que o regime objetivo parece atender melhor o que a lei dispõe. Pode-se dizer que a pesquisa chegou ao resultado de que é praticamente inviável firmar um posicionamento concreto sobre o que a LGPD diz a respeito do regime de responsabilidade civil do controlador e do operador, haja vista a ausência de um comando legal específico. No entanto, em razão da fragilidade do titular, há mais sentido em interpretar a lei em seu favor, atribuindo a responsabilidade objetiva aos agentes de tratamento, seja através de mudanças legislativas ou por meio de entendimentos consolidados pela jurisprudência.
This paper aims to understand the points of view about the controller’s and the processor’s civil liability’s legal framework under the General Personal Data Protection Law (GDPL). For that, documental and bibliographical research is used, with books, journal publications, articles, legislation, and jurisprudence as sources. The research demonstrates the GDPL’s main concepts, as well as addresses the civil liability’s history in the Brazilian legal system, its elements, and legal frameworks. Finally, it analyzes the doctrines on the subject to seek interpretations of the law under discussion regarding the liability of processing agents, as well as studies the courts’ jurisprudence to verify possible understandings which will be used in future decisions. As a result, it was observed that there is a significant doctrinal divergence about the subject, with authors who understand by the strict liability and others by the tort needed liability. In the jurisprudential analysis, it was evidenced that the Superior Court of Justice (SCJ) deals with the subject in a broader sense and for a long time, its judgments demonstrates a concern with the data subject person in several aspects. The Justice Court of São Paulo (JCSP), despite not having many judgments about the subject, has already demonstrated a position in which the strict liability seems to better meet what the law provides. It can be said that the research reached the result that it’s almost impossible to establish a concrete position regarding what the GDPL says about the controller’s and the processor’s civil liability’s legal framework, because of an absence of a specific legal command. However, due to the data subject fragility, makes more sense to interpret the law in his favor, attributing the strict liability to the processing agents, either through legislative changes or through understandings consolidated by the case law.
This paper aims to understand the points of view about the controller’s and the processor’s civil liability’s legal framework under the General Personal Data Protection Law (GDPL). For that, documental and bibliographical research is used, with books, journal publications, articles, legislation, and jurisprudence as sources. The research demonstrates the GDPL’s main concepts, as well as addresses the civil liability’s history in the Brazilian legal system, its elements, and legal frameworks. Finally, it analyzes the doctrines on the subject to seek interpretations of the law under discussion regarding the liability of processing agents, as well as studies the courts’ jurisprudence to verify possible understandings which will be used in future decisions. As a result, it was observed that there is a significant doctrinal divergence about the subject, with authors who understand by the strict liability and others by the tort needed liability. In the jurisprudential analysis, it was evidenced that the Superior Court of Justice (SCJ) deals with the subject in a broader sense and for a long time, its judgments demonstrates a concern with the data subject person in several aspects. The Justice Court of São Paulo (JCSP), despite not having many judgments about the subject, has already demonstrated a position in which the strict liability seems to better meet what the law provides. It can be said that the research reached the result that it’s almost impossible to establish a concrete position regarding what the GDPL says about the controller’s and the processor’s civil liability’s legal framework, because of an absence of a specific legal command. However, due to the data subject fragility, makes more sense to interpret the law in his favor, attributing the strict liability to the processing agents, either through legislative changes or through understandings consolidated by the case law.
Palavras-chave
Responsabilidade civil, Proteção de dados, Lei Geral de Proteção de Dados