Costa Rica: data protection and AI governance
Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (Ley 8968), in force since 2011-09-05. Supervisory authority: PRODHAB.
Other languagesFrançaisEspañolالعربية中文
Data protection
- Instrument
- Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (Ley 8968)
- In force since
- 2011-09-05
- Authority
- PRODHAB
- Penalties
- Amendes administratives
- Key obligations
- Consentement
- Droits ARCO
- Enregistrement bases
Key obligations and penalties are quoted from the record as the source states them; they are not translated.
What the engine decides here
Indicative coverage
This jurisdiction's legal attributes are not modelled yet: no decision is staked on it. The engine flags the uncertainty in its response rather than assuming a permissive regime. Not knowing is an answer; guessing is not.
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders, from the same function the API calls.
- Allow
Read an internal contract
Low-risk operation
- Allow
Send a customer record to US_FED
Low-risk operation
- Deny
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
Do your agents operate in Costa Rica?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.