Abstract
OBJECTIVES: to reflect on the impacts of the General Personal Data Protection Law on Nursing practice. METHODS: reflection article, through the intentional collection of materials relating to the topic. RESULTS: legislation regulates confidentiality, processing and data sharing, requiring institutional protection measures. The nursing team is responsible for acting preventively, both in care and in the management role, in order to avoid the misuse of the patient's personal data. The law allows academic research to be carried out as long as the purpose is clear, data collection occurs with an explicit purpose and data is anonymized. FINAL CONSIDERATIONS: although the General Personal Data Protection Law requires greater care in relation to data processing, it is established on precepts of good faith and respect for the rights of the individual, concepts aligned with the nursing code of ethics.