Soluciones tecnológicas para dar cumplimiento con lo establecido en la Ley Orgánica de Protección de Datos Personales: prototipo de una solución de privacidad para la gestión del consentimiento del usuario y control de acceso a la información personal conforme lo establecido en la ley orgánica de protección de datos personales.

Abstract

Currently, the protection of personal data has been a topic of discussion worldwide. At the level of laws and regulations related to this topic, in Europe there is the RGDP (General Data Protection Regulation), in California there is the CCPA (Consumer Privacy Act), and in Ecuador the LOPDP (The Organic Law for the Protection of Personal Data of Ecuador) was established. All these laws gave companies a period of time to adapt to this new regulation, in Ecuador the LOPDP was published on May 26, 2021; Ecuadorian companies have a period of two years to adapt to comply with the provisions of the LOPDP. These laws have been implemented so that any user has full authority over their personal data. The purpose of these laws is that companies, before processing the personal data of any user, must first have the user's consent, otherwise they will not be able to process or handle the user's data. It is crucial for any company to implement a proper management of consent and access control to personal information for user data. In this paper, we will investigate through a systematic literature review, about the solutions that allow the management of consent and access control. Then, a software prototype will be developed to ensure consent management and access control as established by the LOPDP. The prototype to be developed will contain the techniques or solutions concluded from the systematic literature review.