Costa Rica now has its own laws on the storing, sharing, and access of personal information. Under Law #8968 individuals must now provide their express consent for the collection of their personal information in databases, and individuals will have the right to revoke that consent at any time. The guidelines include the “right to informational self-determination,” which is defined as the right of every individual to know what personal information of theirs is collected in databases, and for what purpose. The only exceptions are in cases where there is a court order, or when a resolution is adopted by a special committee of the Legislative Assembly.
