Política de classificação da informação: um estudo de caso dos documentos do Tribunal Regional Eleitoral de Sergipe (TRE-SE)

Abstract

The overall objective of the study was to outline the elements of an Information Classification Policy, aiming to comply with the provisions of the Access to Information Act (LAI) and the General Personal Data Protection Act (LGPD) in terms of accessibility, transparency, information security, and data protection, with special attention to the data contained in the documents and digital assets made available by TRE-SE. The specific objectives of the research were: To diagnose the current structure and functioning of the Electronic Document and Archive Management Section (SEDEA) of the TRE-SE, focusing on GD procedures and compliance with the requirements of the LAI and LGPD; To identify, classify, and categorize the information contained in the documents made available and received by TRE-SE, considering criteria of sensitivity, access, and relevance to ensure compliance with the LGPD; To assist in the creation of an Information Classification Policy at TRE-SE that includes best practices for document preservation, information security, and accessibility, in line with applicable legal and regulatory standards. In this context, the central research question was: how can an Information Classification Policy at the Regional Electoral Court of Sergipe (TRE-SE) contribute, through strategic guidelines, to guiding the primary and secondary uses of electoral archival documents, while simultaneously ensuring the right of access to public information and the protection of personal data? The study adopted a descriptive action research approach, structured as a case study at TRE-SE. Data were obtained through document analysis (laws, regulations, and policies) and a survey across electoral courts. For interpretation, content analysis was applied, with no need for ethical approval as the research involved only public documents. The action research was structured into four phases aligned with institutional practices. In the exploratory phase, information flows were mapped and a diagnosis of data and information handling at TRE-SE was carried out. In the planning phase, the researcher and the working group participated in meetings, identified demands, and conducted a documentary study of regulations, aiming at the development of an information classification policy. In the action phase, proposals for categorization were implemented, along with procedures for classifying confidential information in compliance with the LAI and restricting access to personal data in accordance with the LGPD, based on criteria of sensitivity, relevance, and accessibility. Finally, in the evaluation phase, the proposed solutions were validated with participants and compared against current legislation, ensuring their normative and operational adequacy. The results led to the development of an Information Classification Policy within TRE-SE, accompanied by the publication of a normative resolution. As a final outcome, an instructional normative guide was produced. These elements consolidated a model that, in addition to meeting legal requirements, can be replicated in other public institutions, strengthening information governance, administrative transparency, and the protection of personal data.