Ensuring Privacy in the Labour Market: Towards Full Compliance with LGPD and GDPR

The right to privacy of sensitive personal data and control over its use and sharing have been central to regulations worldwide. In Brazil, the General Data Protection Law (LGPD), in effect since 2020, mandates strict adherence to security and privacy protocols. To prevent identity theft, financial fraud, and cybercrime, as well as to ensure confidentiality, techniques such as anonymization and pseudonymization are strongly recom-mended. The PRIVAaaS framework, focused on these techniques, was integrated with the General Risk Assessment to offer a systematic approach to assessing and mitigating re-identification and privacy leakage risks. With this integration it was possible to implement effective data privacy measures, evaluate identifiable information and attribute sensitivity, as well as make data corre-lations. This combined approach supports decisions about data sharing and disclosure while ensuring compliance with privacy regulations. As a case study, two real government microdata databases were utilized, which are crucial for economic decision-making, job flow analysis, and the formulation of business policies for organizations that support worker social assistance. Overall, this Practical Experience Report aims to report the results of solutions to protect individual privacy and meet legal requirements through a real case study.