BETWEEN PHILOSOPHY AND TECHNOLOGY: ARTIFICIAL INTELLIGENCE–BASED AUTOMATED DUE DILIGENCE AS AN INTERVENTION TO STRENGTHEN DATA GOVERNANCE IN A BRAZILIAN ORGANIZATION

This article presents an applied research study conducted in a Brazilian organization, herein referred to as Organization Alpha, aimed at implementing a structured privacy and information security due diligence process supported by artificial intelligence to enhance data governance maturity. The intervention originated from a preliminary assessment that revealed the absence of standardized criteria, formal evaluation mechanisms, and traceability in decision-making processes related to the adoption of digital tools and new organizational procedures. In response, a Privacy and Information Security Management System was established, grounded in internal policies aligned with the Brazilian General Data Protection Law (LGPD), the European Union General Data Protection Regulation (GDPR), ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 standards, and the principles of Privacy by Design. A legal-technical due diligence process was initially developed manually and subsequently automated through an artificial intelligence agent trained with previously validated normative templates. The automation resulted in gains in efficiency, standardization, transparency, and risk mitigation, while enabling the creation of a strategic indicator to measure compliance evolution. The findings demonstrate that data governance, particularly when mediated by artificial intelligence, requires the integration of technical and philosophical dimensions, incorporating ethical, epistemological, and teleological limits into technological use. The study further suggests that organizations tend to thrive when balancing innovation with security, control, and institutional accountability.