The currently applicable data protection law in Costa Rica is Law Number 8968 – denominated \u201cLaw for the Protection of People Against the Treatment of their Personal Data\u201d and its Regulations (Executive Decree N. \u00ba 37554-JP of October 30th, 2012) and its amendments. Although there is a Data Protection Law and Regulation in Costa Rica, the law is quite old since it was issued in 2011, and it has been criticized, since in some aspects it lacks of clarity and leaves several matters to interpretation.
Personal Data, according to Law Number 8968, is \u201cany data related with an identified physical person or subject of being identified\u201d. This definition is also quite broad since it includes the phrase \u201cany data\u201d.
The purpose of Law Number 8968 is to \u201cguarantee to any person, independently of its citizenship, residence or domicile, the respect of its fundamental rights, specifically of its right to the informative auto determination regarding its life and private activity\u2026\u201d Furthermore, Article 2 of Law Number 8968 establishes that such Law will be applicable to \u201cpersonal data contained in automatic or manual databases, of public or private entities, and to any type of further use of such data\u201d. The above indicated phrase \u201cand to any type of further use of such data\u201d includes any further treatment or processing of personal data after data collection. Finally, Law Number 8968 and its Regulations define as an \u201cowner or concerned individual\u201d (which basically refers to a \u201cdata subject\u201d) as a \u201cphysical person, who owns the personal data protected in the Law, or its representative\u201d.
The Law\u2019s goal is to protect not only the individual\u2019s personal data but also a person\u2019s right to informative self-determination, i.e. a person\u2019s right to be ensured that its personal data is being treated legitimately, for the authorized purposes, and also to control the transfer of personal information to third parties, through the establishment of guarantees as described in Section 4 of the Law and in several Sections of its Regulations. Any collected personal data belongs, in all cases, to the data subject.
Data subject\u2019s rights included in the Law, are, among others, for the data subject to provide an express consent for the use of its personal data; the rights of revocation, access and the rectification of its personal data. For guarantying all of these rights, the Law and Regulations currently in force in Costa Rica establish a series of obligations, such as for the owner of the personal database to acquire the express consent from the data subject in order to be able to legally collect, process and use its personal data. In order for the data subject to duly provide its consent, it is necessary for the owner of the personal database to provide such data subject with a set of information, as required by Costa Rican Law Number 8968.
There are no prior registrations or licenses to be obtained in order to process data, rather than following all the legal procedures and requirements in order to process or collect it. However, regarding the databases, depending on the type of database, a registration of such database and the corresponding Protocols of Control (which the owner of the database needs to follow and comply with, according to applicable Costa Rican regulations) before the PRODHAB (which is the Costa Rican Data Protection Agency) would be legally required.
<\/p>\n","protected":false},"excerpt":{"rendered":"
The currently applicable data protection law in Costa Rica is Law Number 8968 – denominated \u201cLaw for the Protection of People Against the Treatment of their Personal Data\u201d and its Regulations (Executive Decree N. \u00ba 37554-JP of October 30th, 2012) and its amendments. Although there is a Data Protection Law and Regulation in Costa Rica, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[15,8,6,9,13,7,11,12,14,10],"yoast_head":"\n