The gatehouse notebook is one of the most familiar sights in Costa Rican condominiums: a ruled book where the guard writes each visitor’s name, ID, license plate and unit, in handwriting nobody else will ever read. It serves a real security purpose, but today it has two serious problems: it is useless when you need to look something up, and it frequently violates data-protection law. Here is how to do it right.
What the visitor log is for
Before deciding which data to request, be clear about the goal:
- Verify that the visitor is expected by a resident.
- Know who was inside and when, in case of an incident.
- Control suppliers and contractors working in the condominium.
- Detect patterns (for example, a vehicle entering several units with no apparent reason).
Any data that does not serve one of these purposes is unnecessary.
Law 8968 at the gate
Costa Rica’s Personal Data Protection Law (No. 8968) applies to any organization that collects data about individuals, and condominiums are no exception. Its basic principles, translated to the gatehouse:
| Principle | What it means in practice |
|---|---|
| Informed consent | The visitor must know their data is being recorded and why. A visible sign at the entrance is the most practical way. |
| Purpose | Data is used only for security and access control. Not for marketing, not to share with third parties. |
| Proportionality | Request only what is needed: name, ID, plate, destination unit. No address, no phone, no photo of the ID. |
| Security | The log must be protected. An open notebook on the counter, visible to anyone, is not. |
| Limited retention | Define how long it is kept and delete it afterwards. |
| Access rights | A person may ask what data the condominium holds about them and request correction or deletion. |
Failing these principles can lead to complaints before PRODHAB (the data protection agency) and financial penalties, on top of reputational damage.
What to request and what not to
Yes:
- The visitor’s full name.
- ID number (without photocopying or holding the document).
- Vehicle plate, if applicable.
- Unit and authorizing resident.
- Entry time and exit time.
- General reason (visit, delivery, technical service).
No:
- Holding the ID or driver’s license until exit. Besides being risky, it leaves the person without identification inside the condominium.
- Photographing the document or the visitor without a clear justification and their knowledge.
- Recording data about minors beyond what is strictly necessary.
- Posting or sharing the log in messaging groups.
The ideal process, step by step
- Pre-registration by the resident. The resident announces the visit from their portal: name, plate, date. The gate is already expecting it.
- Verification at the entrance. The guard searches by plate or name, confirms identity, records the entry time.
- Unannounced visit. The guard contacts the resident through the defined channel and records the authorization (who authorized and at what time).
- Exit. The exit time is logged. Visits still “open” at shift end are reviewed.
- Lookup. After an incident, management searches by date, plate, name or unit in seconds.
- Purge. Once the retention period is reached, records are deleted automatically.
Advantages of digitizing the gatehouse
- Instant search by any field instead of flipping through notebooks.
- Per-unit history residents can check without calling management.
- Traceability: who recorded, who authorized, at what exact time.
- Law 8968 compliance by design: role-restricted access, no excess data, configurable retention.
- Less friction at the entrance: a pre-registered visit gets in within seconds.
One important point: the system must work on the device already at the gatehouse, whether a computer, tablet or phone, without complex installations.
Gatehouse and violation reports
The gate is also the first place where bylaw violations are detected: noise, loose pets, improper parking, unauthorized construction. Letting the guard report the violation from the same tool, with time and description, feeds directly into the formal notification process to the owner, which must respect due process: notice, acknowledgment, response and resolution.
How CondoCMS handles it
CondoCMS includes a gatehouse portal to record entries and exits with plate, ID and unit, search active and past visits, and report violations from the gate. Residents announce and review their visits from their own portal, and each role sees only what it should. Request a demo to see it at your gate.
Frequently asked questions
Can the gatehouse ask visitors for their ID?
Yes. For security and access-control purposes the condominium may request the visitor’s identification. What Law 8968 requires is informing why the data is collected, using it only for that purpose, protecting it properly and not keeping it longer than necessary. Photocopying or holding the ID is not recommended.
How long should visitor records be kept?
There is no single legal period set for condominiums. A reasonable practice is to keep the log between 3 and 12 months, enough to handle an investigation or a complaint, and then delete it. The period should be documented in the condominium’s policy.
Can residents see who visited them?
Yes. Each resident has the right to review the history of visits registered for their unit. What they should not be able to see is the history of other units.