Processes personal data, in Costa Rica

Ley No. 8968, Proteccion de la Persona frente al Tratamiento de sus Datos Personales · Read the law's page

• Before collecting a person's personal data, inform them of the purpose of collection and obtain their express, written consent, unless the data are publicly accessible or a law or judicial order compels disclosure.
• Do not process data revealing racial or ethnic origin, political opinions, religious convictions, health, or sexual orientation without the data subject's consent or another narrow statutory ground.
• Adopt technical and organizational security measures to prevent the alteration, loss, or unauthorized access of personal data.
• Do not transfer personal data to a third party or abroad without the data subject's express, valid authorization.
• Do not use collected data for a purpose incompatible with the one disclosed at collection.
• Register any database administered for distribution, dissemination, or commercialization purposes with the Prodhab.

Codigo Penal (Ley No. 4573), art. 196 bis, segun reforma por Ley No. 9048 · Read the law's page

• Do not appropriate, copy, transmit, publish, or otherwise give unauthorized treatment to a person's data or images without their authorization, since doing so for one's own or a third party's benefit, to the danger or harm of that person's privacy, is a criminal offense.
• Treat data revealing ideology, religion, health, racial origin, or sexual orientation, and data belonging to a minor, with particular care, since unauthorized handling of those categories carries an aggravated penalty.