The identification and authentication of personal data holders is a fundamental step in fulfilling requests in accordance with the LGPD.
The purpose of identification and authentication is to ensure that the holder of personal data is who they say they are, in order to protect their rights and prevent fraud.
What is identification and authentication?
Identification is the process of assigning a db to data or code to a person or thing. In the context of the LGPD, identification is the process of confirming the identity of a personal data holder. Authentication in the context of the LGPD is the process of confirming that the person requesting an action is actually the data owner.
Why is it important to identify and authenticate cardholders and how to do it?
These actions are important within the personification: add images of real happy people of the LGPD for two main reasons:
1. To protect data subjects’ rights: Identification and authentication help ensure that data subjects can exercise their rights, such as access, rectification, and erasure. By properly identifying and authenticating data subjects, organizations can prevent malicious actors from making fraudulent requests on behalf of data subjects.
2. Preventing fraud: Identification and authentication help prevent malicious actors from misusing data subjects’ personal data. By properly identifying and authenticating data subjects, organizations can protect data subjects’ personal data from unauthorized access, misuse, and disclosure.
Techniques for preventing fraud and securing cardholders
To ensure fraud prevention and data cmo email list security in identification and authentication processes, as provided for in the LGPD, companies can adopt some common techniques, such as:
- Identification documents: Documents such as an identity card, passport or driver’s license can be to identify holders.