Costa Rica's telecommunications market experienced revenue growth in 2024, driven by mobile and fixed internet services, while the number of licensed operators and fiber optic connections also increased. However, investments as a percentage of GDP slightly decreased, though 5G network deployment is planned, and fiber optics is expanding significantly.

The main players in the Costa Rican telecommunications market include:

• Instituto Costarricense de Electricidad ("ICE"): Branded as Kölbi, the state-owned operator offers mobile, fixed telephony, and broadband (including fiber) services.
• Liberty Latin America: Operates the former Telefónica mobile network (branded Movistar) and the largest cable TV/broadband provider, Cabletica. Liberty provides nationwide 4G mobile, fixed broadband, and Pay TV (cable/IPTV) services.
• Claro Costa Rica (América Móvil): Provides mobile services (around 20% of mobile users) and offers fixed broadband and Pay TV in select areas (including satellite TV).
• Telecable: A local private operator offering cable television and broadband internet in urban areas. It has been innovating with IPTV and Android TV services.
• Others: Sky (DirecTV) provides satellite Pay TV; RACSA (a subsidiary of ICE) offers data services; and independent tower/infrastructure companies like SBA Communications support the sector’s network expansion.

According to the Superintendencia de Telecomunicaciones ("SUTEL"), in 2024, Costa Rica’s telecommunications subscriptions were distributed as follows:

• Mobile communications: 6.98 million lines, equivalent to ~135 % penetration; postpaid lines reached 49.4 % of the total.
• Fixed internet: 1.19 million subscriptions, with fiber optic dominating at 54.4 % (650,295 lines), surpassing cable modem connections.
• Pay TV: ~799,000 subscriptions, continuing a four-year downward trend as users migrate to OTT platforms.
• Fixed telephony (VoIP): 287,202 lines, a 7 % increase compared to 2023.

Costa Rica’s ICT sector is undergoing a period of transformation marked by rapid fiber optic expansion, the start of 5G deployment, and the decline of traditional Pay TV.

Yes. In Costa Rica, the ICT sector is moving into a new stage with the launch of 5G services in 2025, following SUTEL’s spectrum bid, which was recently awarded to Claro and Liberty. This rollout is still in early phases but is expected to enhance connectivity for industries, smart cities, and IoT applications. At the same time, fiber optic networks continue to expand rapidly, already representing more than half of fixed internet subscriptions, while operators invest heavily in nationwide coverage.

The telecommunications sector is primarily governed by the General Telecommunications Law (Law No. 8642 of 2008). This law liberalized the market pursuant to CAFTA-DR commitments and established the legal framework for telecom services, including licensing, spectrum management, interconnection, and user rights. Law 8642 created an independent regulator, the Superintendencia de Telecomunicaciones ("SUTEL"). SUTEL is responsible for granting licenses and concessions, managing spectrum assignments, ensuring competition and interconnection, and enforcing service quality standards

The Ministry of Science, Innovation, Technology and Telecommunications ("MICITT") sets national telecom policy and handles international coordination (for example, representing Costa Rica at the ITU and managing the National Frequency Allocation Plan).

In addition, competition and consumer protection laws apply complementarily, although SUTEL itself is also the competition authority for the telecom sector (including merger control).

Costa Rica’s legal framework provides a unified licensing regime for telecommunications services, with distinctions based on the use of radio spectrum or other public domain resources. Any company wishing to provide public telecom services must obtain a form of “habilitating title” – either a concession or a license/registration – from the government.

• Internet Access / Data Transmission: The provider must register with SUTEL for an “Individual Telecommunications License” (sometimes just called an authorization) in accordance with Law 8642 and its regulations. If the service involves installing network infrastructure on public property (e.g., running fiber optic cables in rights-of-way) but no scarce resources are required, a simple authorization is sufficient. Providers must be either Costa Rican companies or duly registered branches of foreign companies.
• Mobile Telephony: Because mobile phone services use radio spectrum (a public resource), an operator must obtain a concession of the radio spectrum in addition to being a licensed operator. Spectrum concessions are granted by public tender. A mobile operator therefore holds: (1) a telecom license (general authorization to provide wireless services) and (2) a spectrum concession contract issued by MICITT/SUTEL for specific frequency bands.
• Mobile Virtual Network Operators ("MVNOs"): Need to obtain a telecom service license from SUTEL and sign an agreement with a host MNO for access to network capacity.
• Pay TV: The regulatory treatment of pay television depends on the delivery method. Cable TV and IPTV services are considered telecommunications services (transmission of video data) and thus require an operator license from SUTEL.

No, there are no general foreign ownership restrictions for telecom companies in Costa Rica. Since the market opening, the law permits 100% foreign capital. The only constraints might be indirect: a local subsidiary or a branch must be incorporated in Costa Rica or have a registered branch.

They are largely freely determined in practice. Law 8642 gives SUTEL the power to set price regulation only if a service market is not effectively competitive.

Yes. Telecom licenses and spectrum concessions in Costa Rica are not freely transferable without oversight. Any transaction leading to a change in control of a telecom concessionaire or the assignment of a concession/license to a third party requires prior authorization from the authorities.

The parties must file an application providing details of the transaction, and SUTEL has a deadline to object or approve. Approval may be conditional (for instance, the regulator could require the new owner to comply with certain commitments). Once approved, the license or concession terms continue with the new owner.  If the transfer involves a concession, MICITT approval is also required.

Yes, Costa Rica has a well-defined universal service program. The General Telecom Law established the National Telecommunications Fund ("FONATEL") to finance universal service projects. All telecom operators must contribute a percentage of their gross revenues to FONATEL. SUTEL sets the exact contribution rate each year within a range of 1.5% to 3% of revenues (net of interconnection payments), based on funding needs.

In recent years, the rate has typically been around the minimum 1.5%.

Non-discriminatory interconnection is a cornerstone of Costa Rica’s telecom regime. Under Law 8642, all operators have the obligation to interconnect with each other upon request and to provide access to essential facilities. SUTEL’s regulations (the “Access and Interconnection Regulation”) require that interconnection agreements be negotiated in good faith, be transparent, and ensure technical compatibility.

Key aspects: (a) Network interconnection (for voice, messaging, data) must be offered at cost-oriented rates – SUTEL sets the costing methodology to prevent excessive charges, (b) Infrastructure sharing: Operators must allow access to physical infrastructure (towers, poles, ducts) where feasible, on reasonable terms. There is a push for passive infrastructure sharing to avoid duplicating towers, given that currently only ~20% of towers are shared among operators. (c) Unbundling: The law empowers SUTEL to mandate unbundling of network elements if needed for competition, though in practice, Costa Rica went straight to facilities-based competition rather than local loop unbundling.

Costa Rica has a strong tradition of internet freedom and no general obligations to block or filter lawful content. There is no specific “net neutrality” statute by name, but the spirit of net neutrality is reflected in regulations that prohibit unjust discrimination of internet traffic. ISPs in Costa Rica generally must treat internet traffic in a neutral manner, meaning they should not block, throttle, or prioritize content or applications arbitrarily. The only exceptions would be for reasonable network management (e.g., to mitigate congestion or security threats) or compliance with the law.

Radio spectrum in Costa Rica is considered part of the national domain (as stated in the Constitution). The State, through MICITT and SUTEL, manages spectrum to ensure its efficient use. The MICITT’s Viceministry of Telecommunications maintains the National Frequency Allocation Plan ("NFAP"), which designates which frequency bands are for which services (broadcast, mobile, Wi-Fi, etc.). 

SUTEL handles the day-to-day spectrum administration: it issues concessions or permits, monitors usage, and enforces technical norms (power limits, interference prevention). Spectrum is categorized broadly into: (a) bands that require an exclusive concession (e.g., mobile bands, broadcast frequencies), and (b) license-exempt bands (e.g., certain ISM bands for Wi-Fi, Bluetooth) that can be used by anyone so long as devices are homologated.

High-demand spectrum is awarded via competitive public bidding. Under Law 8642, any spectrum for public telecom networks (like cellular bands) must be granted by a public concession process (unless reserved for ICE by law, which was only during a transition period). Costa Rica’s approach has been to auction or tender mobile spectrum in lots.

The tender process is handled by SUTEL and follow criteria set by MICITT (which issues policy guidelines for auctions). The President must approve the final concession contracts. Some spectrum bands that are not scarce (or for private use networks) can be assigned on a first-come basis or via simple authorization by SUTEL, but prime bands for commercial services go through auctions to ensure fairness and state revenue. Once awarded, operators must pay annual spectrum fees to SUTEL based on the frequencies held.

Currently, there is no free-form secondary trading of spectrum in Costa Rica – any transfer or leasing of spectrum rights requires regulatory consent. Spectrum concessions typically include clauses prohibiting assignment without government approval.

Yes. Telecom infrastructure deployment often requires permits at multiple levels of government. While SUTEL grants the high-level telecom license or concession, municipal permits are typically needed for civil works like digging fiber optic trenches or building wireless towers. Each municipality in Costa Rica can have its own ordinances for construction and land use. This meant, historically, that telcos had to navigate a patchwork of local rules – some municipalities had no specific tower regulations even a decade after market opening.

Costa Rica encourages the sharing of passive infrastructure to reduce costs and visual impact. Independent tower companies (such as SBA and American Tower) operate in the country and typically do not require a telecom service license so long as they purely provide passive infrastructure (towers, masts, building space) and not telecom services themselves. These companies must comply with local construction permits and safety regulations, but from SUTEL’s perspective, they are considered infrastructure providers, not service operators. They often register with SUTEL in a special registry of infrastructure providers, mainly for informational purposes.

Besides the general rules mentioned above, Costa Rica’s regulatory framework treats passive infrastructure as a facilitatory service. Independent tower companies (who build towers and lease space on them) operate under business licenses but do not need a telecom operator license because they are not providing telecom services directly. Executive Decree No. 34765 (the regulation under Law 8642) clarifies that passive infrastructure provision is not a telecom service per se. These companies simply must adhere to technical standards (e.g., structures must meet the Ministry of Health’s radiation exposure limits and engineering codes) and must not discriminate unreasonably among telecom operators – effectively, if an independent tower company has capacity, it should lease to any licensed operator on similar terms

Under the telecom law, a submarine cable system would apply to MICITT for a Submarine Cable Landing License. The application must include details such as the planned route, landing station location, technical specifications, and capacity. SUTEL and MICITT review to ensure that spectrum (for the cable’s landing station frequencies) and national security considerations are addressed. Environmental permits are also important – because under maritime and environmental law, laying cable on the seabed may require assessments or coordination with the Environment Ministry.

Costa Rica does not have its own satellites, but it authorizes foreign satellite systems to provide services in the country. Any entity offering satellite communication services (whether using geostationary satellites or non-geostationary constellations like LEOs) must have a telecom license if it provides services to the public in Costa Rica.

Yes. Any ground station (earth station) transmitting to satellites from Costa Rican territory needs a radio concession for the frequency it will use to uplink. The station must be authorized by SUTEL/MICITT.

Direct-to-device ("D2D") satellite services (also known as satellite-to-phone or non-terrestrial networks, NTN) are a new area and not yet fully regulated. Costa Rica has no specific law or rule on D2D as of 2025.

However, any such service would fall under existing telecom rules: if a satellite aims to provide connectivity directly to handsets in Costa Rica, the satellite operator (or its local partner) would need a telecom service authorization and likely a spectrum agreement for the specific band used.

Yes. Costa Rica maintains a strict homologation (type approval) regime for telecom devices. All telecommunications equipment that will be used or sold in Costa Rica – from mobile handsets and radio transmitters to Wi-Fi routers and satellite terminals – must be certified by SUTEL for compliance with technical standards. SUTEL operates a homologation system where manufacturers or importers submit the device for testing or provide test reports.

Costa Rica’s audiovisual sector is characterized by a mix of traditional broadcasters, Pay TV services, and rapidly growing internet-based platforms. Free-to-air television ("FTA") remains influential– most households can receive national broadcast channels, and they continue to draw audiences for news, sports, and entertainment. However, viewership has gradually shifted toward Pay TV and OTT streaming among younger demographics and in urban areas.

The audiovisual sector’s main players include:

• Televisora de Costa Rica (Teletica)
• Repretel
• Sistema Nacional de Radio y Televisión ("SINART") –
• Pay TV Operators: The leading Pay TV companies are Liberty Cabletica, Telecable, and Claro TV. There is also Sky and ICE.
• OTT Platforms: While not Costa Rican companies, services like Netflix, YouTube, and Disney+ are crucial players in terms of viewership.

SUTEL does not publish official percentage market shares for OTT vs free-to-air broadcasting. What is publicly available is that Pay TV subscriptions in 2024 numbered about 798,828, and that this figure has declined for four straight years, indicating migration toward OTT. Free-to-air broadcasting remains widely accessible, particularly for news, sports, and general programming, while OTT platforms (e.g., Netflix, YouTube, Disney+) are growing rapidly in popularity but lack disclosed share metrics.

Costa Rica’s audiovisual sector faces several structural and regulatory challenges derived from technological convergence and market evolution. The main issue is the outdated legal framework governing broadcasting and audiovisual services. Traditional free-to-air radio and television are still regulated by the Ley de Radio N.º 1758 of 1954, while subscription-based television (cable and IPTV) falls under the Ley General de Telecomunicaciones N.º 8642 of 2008. This division has created inconsistencies, as new hybrid and digital models—such as OTT streaming—do not fit neatly into either regime. As a result, the regulatory gap between traditional broadcasters and online platforms continues to widen.

Another central issue is the absence of specific regulation for OTT platforms, which operate freely under general commercial law. Although they are not subject to local licensing, they are taxed under the Resolución DGT-R-13-2020, which applies a 13% VAT to cross-border digital services, including streaming subscriptions. In contrast, local broadcasters and Pay TV operators remain bound by national concession requirements and content obligations, creating asymmetrical conditions of competition.

Further challenges include media ownership and foreign participation limits still present under the Radio Law, which require State authorization for broadcast concessions and restrict direct foreign control—limitations that no longer apply to telecom-based audiovisual operators under Law 8642. Additionally, there is growing pressure to modernize content quotas and public-interest obligations, originally designed for analog broadcasting, to reflect the digital environment and audience fragmentation. The sector also lacks explicit must-carry provisions, leaving channel carriage to private negotiation, and faces questions regarding consumer protection and content accountability in the expanding digital ecosystem.

Audiovisual services in Costa Rica are governed primarily by two laws. The Radio Law (Ley de Radio N.º 1758 of 1954) regulates free-to-air radio and television broadcasting, including concessions for the use of spectrum, public-interest obligations, and technical standards. The General Telecommunications Law (Ley N.º 8642 of 2008) liberalized the telecommunications sector and governs subscription-based audiovisual services such as cable, IPTV, and satellite television.

Regulation is shared between MICITT, which defines national broadcasting and telecommunications policy and grants broadcast concessions; and SUTEL, which regulates telecom-based audiovisual services, manages operator licensing, monitors market competition, and enforces user-protection rules.

Costa Rica applies a dual licensing structure depending on the service type. Free-to-air radio and television broadcasters operate under a broadcast concession (concesión de frecuencias) granted pursuant to the Ley de Radio N.º 1758, which governs the use of spectrum for broadcasting purposes. In contrast, subscription-based audiovisual services such as cable TV, IPTV, or satellite TV operate under the telecommunications regime created by the Ley General de Telecomunicaciones N.º 8642. These services require an operator license or concession (título habilitante) from SUTEL, depending on whether they use radio spectrum or only network infrastructure.

Applications for broadcast concessions must be submitted to MICITT, which oversees public tenders and technical allocation of frequencies. Applicants must provide corporate, financial, and technical documentation and comply with the frequency allocation plan. For subscription-based audiovisual services, applicants must register before SUTEL, either to obtain a telecom concession (if spectrum or public domain assets are used) or a license/authorization (if the service is provided over private infrastructure). All applicants must be Costa Rican companies or duly registered branches of foreign entities and must demonstrate compliance with technical and consumer-protection standards established in the regulations of Law 8642. SUTEL has recently launched a public bid for radio and TV frequencies.

Under the Ley de Radio N.º 1758, broadcast concessions are typically granted for 10 years, renewable upon compliance with concession conditions and regulatory requirements. Under the Ley General de Telecomunicaciones, telecom licenses and concessions are granted for an indefinite duration, unless otherwise limited by the specific title or spectrum assignment terms. Spectrum concessions generally last 15 years and may be renewed subject to performance and payment of the corresponding fees established by SUTEL.

Yes, broadcasting concessions and telecommunications licenses or concessions are not freely transferable without prior authorization from the competent authority. Under the Ley de Radio N.º 1758, any assignment or transfer of broadcast frequency rights requires prior approval from the State, through MICITT, as these frequencies are part of the national radio spectrum and considered public domain.

Similarly, under the Ley General de Telecomunicaciones N.º 8642, telecom concessions and licenses (including those for subscription-based audiovisual services) may only be transferred or result in a change of control with prior authorization from SUTEL. The parties must file an application describing the transaction, the new ownership structure, and evidence of technical and financial capacity. SUTEL may approve the transfer if the new holder meets the same legal, technical, and financial requirements imposed on the original licensee.

Yes. The level of restriction depends on the type of audiovisual service. Under the Ley de Radio N.º 1758, free-to-air radio and television frequencies are considered a public domain asset, and concessions for their use must be granted to Costa Rican nationals or companies incorporated in Costa Rica. Any direct or indirect foreign participation requires explicit State authorization, given the public-interest nature of broadcast frequencies. In contrast, telecommunication-based audiovisual services such as cable, IPTV, or satellite TV—regulated by the Ley General de Telecomunicaciones N.º 8642—are open to 100% foreign investment, provided the operator is duly incorporated or registered in Costa Rica and complies with local tax and regulatory requirements.

There are no statutory cross-ownership prohibitions between broadcasters and telecom operators, but concentration of ownership may be reviewed by SUTEL under its competition-authority powers (Articles 52–56 of Law 8642) to ensure market neutrality and prevent anti-competitive practices.

Under the Ley de Radio N.º 1758, the number of broadcast concessions that an individual or entity may hold is determined by concession terms and the availability of frequencies, with the State retaining discretion to preserve pluralism and spectrum efficiency. The current bid launched by SUTEL contains spectrum concentration provisions.

Yes. Under the Ley de Radio N.º 1758 and the Ley General de Telecomunicaciones N.º 8642, all entities providing broadcasting or subscription-based audiovisual services must be duly registered. Free-to-air broadcasters obtain a broadcast concession from MICITT, which automatically enters them in the National Register of Concessions. Telecommunication-based audiovisual operators (such as cable and IPTV providers) are registered by SUTEL within its Registro de Títulos Habilitantes.

Production companies and advertising agencies are not required to maintain a specific audiovisual registry but must comply with normal regulatory obligations, such as commercial and tax registration requirements applicable to service providers in Costa Rica.

The Ley de Radio imposes a public-interest programming obligation on free-to-air broadcasters, requiring them to allocate a portion of daily programming to educational, cultural, and national content. The exact percentage is not fixed by statute but may be determined within each concession’s terms and conditions. Subscription-based audiovisual services and OTT platforms do not have mandatory national-content quotas. Nevertheless, local broadcasters frequently include Costa Rican productions to satisfy concession objectives and public-interest criteria.

Yes. Under the Ley de Radio, licensees must respect content standards designed to protect public morals, minors, and national values. Broadcasters are expected to provide content consistent with educational and civic principles and to comply with scheduling restrictions for adult material. There are no prescriptive quotas for specific genres such as news or fiction, but children’s programming and educational content are encouraged under the public-interest mandate. OTT and subscription-based services are only bound by general laws on consumer protection, public health, and criminal liability for prohibited content.

Costa Rica does not impose fixed screen quotas expressed as percentages of national content for broadcasters or audiovisual operators. However, under the Ley de Radio N.º 1758, free-to-air broadcasters are required to include programming of national, educational, and cultural interest as part of their concession obligations. These obligations are qualitative rather than quantitative and are interpreted in line with each concession’s public-service purpose. Subscription-based audiovisual services (cable, IPTV, satellite) and OTT platforms are not subject to any content-quota requirements. Their programming choices remain governed by market demand and general laws on advertising, consumer protection, and the protection of minors.

No. Costa Rica’s telecommunications and audiovisual legislation does not establish an explicit must-carry obligation for subscription-based audiovisual operators. There is no statutory requirement forcing cable or IPTV providers to retransmit local free-to-air signals.  But free-to-air channels must provide their content to Pay TV operators.

Carriage of free-to-air channels is therefore governed by private agreements between broadcasters and Pay TV operators, subject to general telecom and competition rules enforced by SUTEL. In practice, most cable systems voluntarily include major national broadcasters (Teletica, Repretel, SINART) to meet consumer expectations and maintain competitive parity, but this practice arises from commercial negotiation rather than legal mandate.

Costa Rican law does not establish production-origin quotas for advertising in audiovisual media. Both domestic and foreign advertising are permitted, provided they comply with national regulations on language, decency, and truthful communication. Advertising must observe the general moral principles contained in the Ley de Radio N.º 1758 and the Ley de Promoción de la Competencia y Defensa Efectiva del Consumidor N.º 7472. There are no reciprocity requirements for foreign ads, though all content broadcast in Costa Rica must comply with local consumer-protection and health standards.

Yes. Costa Rican law prohibits or restricts the advertising of certain products to protect consumers and minors. The Ley General de Salud N.º 5395 prohibits advertising of tobacco and strongly restricts alcohol advertising, including time-slot and audience limitations. The Código de la Niñez y la Adolescencia N.º 7739 forbids the broadcast of advertising harmful to children’s physical or moral development. In addition, misleading, discriminatory, or deceptive advertising is prohibited under Law 7472 and can be sanctioned by the Comisión Nacional del Consumidor ("MEIC").

No specialized registry for advertisers exists under audiovisual law. Advertising agencies and media companies operate under ordinary commercial and tax registration. There are no reciprocity or local-representation obligations for foreign agencies or advertisers.

Traditional broadcasters pay concession fees established under the Ley de Radio N.º 1758 for use of the spectrum and administrative rights. Subscription-based audiovisual services are subject to general corporate income tax and value-added tax (IVA 13%). Since 2020, OTT and streaming platforms that provide digital content to Costa Rican consumers are taxed under Resolution DGT-R-13-2020, which applies the 13% VAT to cross-border digital services; the tax is automatically withheld by local banks or card issuers. No additional sector-specific levies are currently imposed on audiovisual or streaming services.

OTT (Over-the-Top) platforms such as Netflix, Disney+, Amazon Prime, and YouTube are not specifically regulated as audiovisual services in Costa Rica. They operate under general commercial and consumer-protection law, without requiring a broadcasting or telecommunications license from SUTEL or a concession from MICITT.

There is no obligation for OTT providers to register locally or appoint a legal representative, unless they establish a physical presence in Costa Rica. Regulatory oversight applies only to the underlying connectivity and data services (governed by Law N.º 8642), not to the audiovisual content itself.

Costa Rica does not impose national content quotas or programming obligations on OTT or on-demand platforms. Their content selection is entirely market-driven. The only applicable limits concern compliance with laws on consumer protection, advertising, and content harmful to minors, which apply equally to all audiovisual distributors operating in the country.

Since Resolution DGT-R-13-2020 issued by the Ministry of Finance, OTT and other digital content platforms providing services to Costa Rican consumers are subject to a 13% VAT on cross-border digital services. The VAT is automatically withheld by local banks or card issuers at the time of payment, ensuring fiscal compliance even for providers without local registration.

Not yet. Costa Rica does not currently have a dedicated, enacted AI law. The country relies on existing legal domains (data protection, intellectual property, cybersecurity, consumer protection) to address AI risks. That said, Costa Rica has adopted a National Artificial Intelligence Strategy ("ENIA") 2024–2027, which is intended to lay out policy pillars, principles (ethics, human rights, transparency), and guidelines for future regulation.

There are no known sector-specific AI regulations unique to those fields in force yet. However, sectors like finance and health that already have strict data, privacy, consumer, or medical regulations may implicitly constrain how AI is used.

In the absence of specific AI law, the primary authority is MICITT (Ministry of Science, Innovation, Technology and Telecommunications), which is leading the development of the national AI strategy and is proposed in draft initiatives to be the oversight body for AI.

Several draft bills are under consideration. One notable draft is Bill No. 23771, submitted in May 2023, which proposes an AI regulatory framework with auditing, accountability, risk categorization, transparency, bias mitigation, and oversight mechanisms.

There is no AI-specific statute in force that imposes mandatory requirements uniquely for AI systems. AI deployments must comply with existing laws—especially data protection Law No. 8968 (lawful basis, purpose limitation, data-subject rights), consumer protection, IP, and cybersecurity frameworks.

No, not by binding law yet.

The National AI Strategy ("ENIA") 2024–2027 recommends human-rights-centric AI (dignity, transparency, accountability), risk management, and ethics-by-design in public and private projects; these are policy guidelines, not binding rules.

Not mandated by current law.

No AI-specific disclosures are required yet. General transparency duties flow from data protection Law 8968 (e.g., privacy notices, lawful processing) and consumer law for truthful information; the draft AI bill would add explicit transparency duties for certain systems.

Not at present. The Draft AI bill (Exp. 23.771) would require risk classification and AI impact assessments for significant-risk uses, overseen by a MICITT-based authority, but this remains pending.

Costa Rica has no specific AI law yet, but several general regulations apply. The most relevant are the Data Protection Law No. 8968, which governs personal data processing in AI systems; the Consumer Protection Law No. 7472, ensuring transparency and liability for AI-based products and services; and the General Telecommunications Law No. 8642, applicable when AI is used in telecom operations. Other frameworks, such as cybersecurity, intellectual property, and public-sector transparency rules, also apply depending on the context of use.

Costa Rica lacks a single, comprehensive cybersecurity law. Cybercrime and security are regulated through a patchwork of criminal statutes (notably Law No. 9048 on computer and related offenses) and procedural laws (e.g., Law on Intervention of Telecommunications) as applied within the Criminal Code. 

In 2023, Costa Rica launched a National Cybersecurity Strategy 2023–2027, setting a policy and action framework to strengthen governance, resilience, legal adaptation, infrastructure protection, capacity building, and international cooperation.

The National Cybersecurity Strategy 2023–2027 is actively in force, issued by MICITT, with five pillars including governance, legal framework adaptation, protection of critical infrastructure, ecosystem capacity building, and international cooperation.

MICITT has published drafts and invited consultation over a national cybersecurity strategy and related regulatory frameworks. Also, Costa Rica is exploring initiatives to establish a Cybersecurity Operations Center ("Cyber-SOC") by 2026 under joint U.S. support.

There is no sector-agnostic law that currently imposes standardized, enforceable cybersecurity obligations on private companies across all sectors. The National Cybersecurity Strategy 2023–2027 envisions developing legal and regulatory frameworks for mandatory controls, especially for critical infrastructure and regulated sectors (e.g., telecom, energy) in future updates.

In certain industrial or operational contexts, organizations adopt internal security audits, continuity plans, and risk assessments as part of best practices (especially in industrial control systems).

A prominent case is the 2022 Conti ransomware attack against Costa Rican government institutions (Ministry of Finance, social security, etc.). The attack caused widespread service disruption and led the government to declare a national emergency. The event exposed gaps in governmental cyber defenses but publicly reported legal sanctions against private sector entities are limited.

Not generally mandated by law for all entities. However, public agencies are expected under the National Cybersecurity Strategy to coordinate with the national CSIRT-CR and report significant incidents.

After the 2022 attack, the government required affected public institutions to notify the CSIRT-CR and maintain backups, vulnerability scans, logs and incident documentation.

Additionally, Bill No. 24135 (pending) would require 72-hour breach notification for data incidents, closer to GDPR norms.

Private and public entities typically coordinate through Costa Rica’s CSIRT-CR, and via MICITT and relevant sector regulators. In government incidents, institutions are required to notify CSIRT-CR and collaborate in investigation efforts. Law enforcement (Judicial Investigation Agency/OIJ) is engaged under cybercrime statutes when an attack involves criminal activity.

Yes. Costa Rica has Law 9048 (2012) on computer & related offenses amending the Criminal Code; additional reforms (e.g. Law No. 9135) have expanded the definition of cybercrimes (unauthorized access, interception, data theft, extortion, sabotage) under national law.

Costa Rica actively participates in multiple international cybersecurity cooperation frameworks. It is a party to the Budapest Convention on Cybercrime (ratified by Executive Decree No. 40546 in 2017) and has signed the Second Additional Protocol to enhance cross-border cooperation and electronic evidence sharing. The country also engages through the Organization of American States ("OAS") regional cybersecurity programs and the GLACY+ Project of the Council of Europe, which supports legislative and capacity-building efforts against cybercrime.

In addition, Costa Rica has pursued bilateral and regional initiatives—notably a U.S.–Costa Rica partnership to establish a National Cybersecurity Operations Center ("Cyber-SOC") by 2026, and a cooperation agreement with the Dominican Republic on digital transformation and cybersecurity. The National Cybersecurity Strategy 2023–2027, led by MICITT, explicitly identifies international cooperation, information sharing, and joint response mechanisms as key pillars for strengthening national resilience and global coordination.