Skip to content
PrivacyCosta Rica

Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP

What is Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP?

Costa Rica's Law for the Protection of Persons Regarding the Processing of Their Personal Data (Law No. 8968 of 2011), as amended by Executive Decree No. It comprises 24 controls organised across 7 domains, and applies in Costa Rica.

How Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP maps to other frameworks

All 24 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.

See the control mappings →

The 7 domains Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP groups its controls into

CR Ley 8968: Denuncias, Procedimiento y Regimen Sancionatorio
CR Ley 8968: PRODHAB y Registro de Bases de Datos
CR Ley 8968: Transferencia Internacional de Datos
CR Ley 8968: Datos Sensibles, Seguridad y Confidencialidad
CR Ley 8968: Derechos del Titular (ARCO)

Each of these has at least one control mapped to a control in Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP. The number is how many Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP controls are shared, counted from the mapping graph.

Implementation guides for frameworks that overlap Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP

Training on frameworks that overlap Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP

There is no course on Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.

Where Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP overlaps with the standards you already hold

What an auditor will ask you for

All 24 Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.

Read the Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP evidence request list

Prefer it in your inbox?

The list above is free to read. If you would rather have the Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP version emailed so it is there when you need it, say where to send it.

What Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP means in your sector

What Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP means for your job

Questions people ask about Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP

What is Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP?
Costa Rica's Law for the Protection of Persons Regarding the Processing of Their Personal Data (Law No. 8968 of 2011), as amended by Executive Decree No.
How many controls does Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP have?
Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP contains 24 controls organized across 7 domains.
Where does Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP apply?
Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP is applicable in Costa Rica. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP map to?
Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP has control-to-control mappings with 2 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.

Query Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP programmatically

Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP, its 24 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP API reference and MCP config →

What Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP requires, control by control

Each page carries the requirement text for one Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP control and what an assessor expects to see as evidence.

How ready are you for Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .