Costa Rica is gradually strengthening its regulatory approach to privacy and artificial intelligence as the country prepares for a new administration, even as immediate national concerns such as crime, healthcare, infrastructure, and employment remain dominant. The existing privacy framework, based on Law No. 8968, is widely considered outdated, prompting several legislative proposals aimed at modernizing data protection, including stronger rules for biometric data, expanded protections for minors, and potential alignment with the EU’s GDPR standards through a new comprehensive data protection law. On the artificial intelligence front, the country has adopted a National AI Strategy for 2024–2027, developed with international cooperation and grounded in ethical, inclusive, and innovation-focused principles. It is complemented by the adoption of the INTE/ISO/IEC 42001:2026 standard to guide responsible AI management. Meanwhile, multiple AI-related bills remain under discussion, covering areas such as electoral integrity, system governance, and responsible deployment. Despite this progress, experts emphasize that Costa Rica must invest further in talent development, regulatory capacity, and institutional readiness to ensure that privacy and AI governance keep pace with rapid technological change.
Read more here
https://inplp.com/latest-news/article/legal-update-on-privacy-and-artificial-intelligence-costa-rica
