In order to guarantee the privacy of users’ data, the Brazilian government created the Brazilian General Data Protection Law (LGPD). This article made a diagnostic of Brazilian organizations in relation to their suitability for LGPD, based on the perception of Information Technology (IT) practitioners who work in these organizations. We used a survey with 41 questions to diagnose different Brazilian organizations, both public and private. The diagnostic questionnaire was answered by 105 IT practitioners. The results show that 27% of organizations process personal data of public access based on good faith and LGPD principles. In addition, our findings also revealed that 16.3% of organizations have not established a procedure or methodology to verify that the LGPD principles are being respected during the development of services that will handle personal data from the product or service design phase to its execution and 20% of the organizations did not establish a communication process to the personal data holders, regarding the possible data breaches. The result of the diagnostic allows organizations and data users to have an overview of how the treatment of personal data of their customers is being treated and which points of attention are in relation to the principles of LGPD.

Design Thinking has been used by organizations as a requirement elicitation technique for making use of the immersion procedure that, as a consequence, brings the team stakeholder closer to the software project and allows the creation of projects with a design that is closer to the end user and with higher quality, minimizing the problems in requirements elicitation. In this work, we evaluate the elicitation process of software requirements of mobile applications developed in a Brazilian Public Agency using Design Thinking. Furthermore, we presented a practical case study in which Design Thinking is used in eliciting requirements of developed applications. We also compared the phases of development process adopted by the Agency with the Design thinking recommendations. Our comparative study demonstrates that the traditional methodology adopted by the Agency is bureaucratic and hinders the creation process, as well as the interaction between stakeholders and members of the development team and the transfer of knowledge.