Costa Rica

Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP

24 controls. 2 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

24 controls 2 frameworks share controls with it Costa Rica verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you runShared controls
Colombia Data Protection Law (Law 1581 of 2012)8measure it →
GDPR7measure it →

Every control

CodeControlAlso in
CR-8968-Art.1Objetivo y fin (autodeterminacion informativa)0
CR-8968-Art.10Seguridad de los datos2
CR-8968-Art.11Deber de confidencialidad0
CR-8968-Art.12Protocolos de actuacion0
CR-8968-Art.13Garantias efectivas0
CR-8968-Art.14Transferencia de datos personales (regla general)2
CR-8968-Art.15Agencia de Proteccion de Datos de los Habitantes (Prodhab)1
CR-8968-Art.16Atribuciones de la Prodhab0
CR-8968-Art.2Ambito de aplicacion0
CR-8968-Art.21Registro de archivos y bases de datos0
CR-8968-Art.22Divulgacion del registro0
CR-8968-Art.24Denuncia0
CR-8968-Art.25Tramite de las denuncias0
CR-8968-Art.27Procedimiento sancionatorio0
CR-8968-Art.28Sanciones (multas)0
CR-8968-Art.29-31Tipificacion de faltas (leves, graves, gravisimas)0
CR-8968-Art.3Definiciones0
CR-8968-Art.33Canon por regulacion y administracion de bases de datos0
CR-8968-Art.4Principio de autodeterminacion informativa2
CR-8968-Art.5Principio de consentimiento informado2
CR-8968-Art.6Principio de calidad de la informacion2
CR-8968-Art.7Derechos de acceso, rectificacion, supresion y cesion (ARCO)2
CR-8968-Art.8Excepciones a la autodeterminacion informativa0
CR-8968-Art.9Categorias particulares de los datos (datos sensibles)2

Tell me when Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

  • Mechanism for data subjects to revoke consent
  • Records of consent revocations actioned
  • Consent capture free of dark patterns
  • Consent-revocation mechanism honoured within 15 days
  • Consent records showing express, informed, prior consent per data subject
  • Information notice content matching the Law's required elements

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

What this page is

A control-level reference for Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition