Costa Rica — data protection and AI governance

Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (Ley 8968), in force since 2011-09-05. Supervisory authority: PRODHAB.

CRIndicative coverageVerified on Lire en français

Data protection

Instrument
Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (Ley 8968)
In force since
2011-09-05
Authority
PRODHAB
Penalties
Amendes administratives
Key obligations
  • Consentement
  • Droits ARCO
  • Enregistrement bases

What the engine decides here

Indicative coverage

This jurisdiction's legal attributes are not modelled yet: no decision is staked on it. The engine flags the uncertainty in its response rather than assuming a permissive regime — not knowing is an answer, guessing is not.

Three decisions, computed just now

Same actions, this jurisdiction's context. These answers come out of the engine as the page renders — the same function the API calls.

  • Read an internal contract

    Low-risk operation

    ALLOW
  • Send a customer record to US_FED

    Low-risk operation

    ALLOW
  • Decide on a job application

    Decision reserved for a human

    DENY

Advisory decisions. StructureClerk decides; your infrastructure enforces.

Do your agents operate in Costa Rica?

The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.

Other jurisdictions — Central America