LGPD inside the app: an undergraduate thesis turns privacy requirements into code
Lucas Lopes Xavier defended at FCTE/UnB an undergraduate thesis translating LGPD and ISO 29100 requirements into implementable specifications for applications — shortening the distance between legal norms and engineering practice.
Brasília, July 25, 2023
Every software team has heard about Brazil’s General Data Protection Law. Few can answer, without hesitating, what exactly the norm demands from the code shipping tomorrow. This gap between legal discourse and development practice is what the undergraduate thesis defended in July 2023 by Lucas Lopes Xavier seeks to reduce, advised by Prof. Fabiana Freitas Mendes .
The work takes seriously two texts that usually live in different cabinets: the LGPD and ISO 29100. The former sets the regulatory frame; the latter, the technical vocabulary. In the thesis, that pair becomes a privacy-requirements catalog that can go straight into an application’s backlog — with verification criteria, decision points, and clear trade-offs.
By speaking to software quality , the thesis delivers the pragmatic step that vague synonyms such as “privacy by design” tend to avoid: turning principles into verifiable artifacts. It is a useful work both for teams already operating in compliance and for those unsure of where to start.
The full text — written in Portuguese — is available at the UnB Undergraduate Theses Digital Library.
About CEDIS: The Center for Studies, Development, and Innovation in Software (CEDIS), linked to the University of Brasília, researches and develops innovative software solutions.