In order to regulate the use of information, the General Law of Data Protection (GLDP) was sanctioned in 2018, but its practical applicability and scope are still unclear and vary according to the culture of each Organization. This research aims to analyze the role of the different elements of Organizational Culture in the process of adaptation of Brazilian Health Organizations to the GLDP, considered relevant because it is one of the environments with the highest circulation of sensitive data. Semi-structured interviews were conducted with managers of Health Organizations and the cases analyzed evidenced that: (i) there is a growing movement to strengthen the protection of private life; (ii) there are breaches, mostly related to human conduct; (iii) the size of the organization and its entrepreneurial profile are fundamental in the process of adaptation to the GLDP; (iv) this process does not include the concern with visible artifacts, especially in areas with a predominance of the end-activity, such as patient circulation spaces, nor does it make use of corporate jargon for the establishment of cultural identity; and (v) Organizational Culture and internalization facilitated the adaptation to GLDP. Finally, future studies with segmented samples are suggested, allowing a broader cultural diagnosis and favoring strategic actions according to the different Organizational Cultures.