Mexico

✓ ✓ OfficialNational Strategydiputados.gob.mx ↗

Data protection authority governance in Federal Law on Protection of Personal Data Held by Private Parties

On 21 March 2025, the Mexico Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The publication is part of a broader legislative package that includes three different laws: the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Parties and the Federal Law on the Protection of Personal Data Held by Private Parties, each with its own article structure and scope of ap...

✓ ✓ OfficialNational Strategygaceta.diputados.gob.mx ↗

Data protection authority governance in Decree Proposing the Amendment of Various Articles of the Political Constitution of the United Mexican States regarding organisational simplification

On 21 March 2025, the Decree proposing the amendment of various articles of the political constitution of the United Mexican States was partially implemented, modifying the governance of regulatory authorities, including data protection oversight. The amendment includes dissolution of the National Institute for Transparency, Access to Information, and Protection of Personal Data (INAI), with its functions transferred to the Secretariat of Anti-Corruption and Good Governance (SABG), following ...

✓ ✓ OfficialNational Strategydiputados.gob.mx ↗

Data protection regulation in Federal Law on protection of personal data held by private parties, including data protection regulation (No. LXVI/1SPO-1645)

On 21 March 2025, the Mexico Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The law establishes data processing principles such as lawfulness, purpose limitation, consent, data quality, proportionality, and accountability. It establishes protections for sensitive and financial information, requiring explicit consent from individuals for processing such data. Private entities are mandated to provide comprehensive privacy notices, delineatin...

✓ ✓ OfficialNational Strategydiputados.gob.mx ↗

Cross-border data transfer regulation in Federal Law on Protection of Personal Data Held by Private Parties

On 21 March 2025, the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The publication forms part of a legislative package that includes three separate Laws: the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Parties, and the Federal Law on the Protection of Personal Data Held by Private Parties. The LFPDPPP regulates international transfers of personal data ...

20 MAR 2025 · Executive Order

National Institute for Transparency, Access to Information and Protection of Personal Data Transfer Committee to operationalise transition to Secretariat of Anti-Corruption and Good Governance

On 20 March 2025, the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) convened its final session in Mexico City to establish a Transfer Committee, in accordance with the decree published in the Diario Oficial de la Federación introducing new laws on transparency, access to information, and data protection. The Committee is responsible for coordinating the transfer of the Institute’s functions and managing its administrative affairs to the Secr...

✓ ✓ OfficialNational Strategyhome.inai.org.mx ↗

19 FEB 2025 · Law / Act

Bill amending Article 73 of the Political Constitution to include artificial intelligence within the legislative powers of the Mexican Congress

On 19 February 2025, the Bill amending Article 73 of the Political Constitution to include artificial intelligence within the legislative powers of the Mexican Congress was introduced to the Chamber of Deputies The Bill seeks to explicitly empower Congress to enact laws governing AI, recognising its transformative role across various domains and the need for regulatory oversight. The Bill aims to enable Mexico to develop clear and effective AI regulations that support responsible innovation w...

National Strategygaceta.diputados.gob.mx ↗

31 JAN 2025 · Law / Act

Reform of Data Protection and Transparency Laws focusing on restructuring INAI

On 31 January 2025, the government of Mexico announced its intention to submit a series of reforms to the Congress of the Union. The reform involves the transfer of 80% of the INAI's current responsibilities to the Anti-Corruption and Good Governance Secretariat, which will operate using only 35% of the INAI's previous budget. The reforms will entail the repeal of the extant Federal Law of Transparency and Access to Public Information and the introduction of new general laws governing transpa...

National Strategygob.mx ↗

07 JAN 2025 · Law / Act

Government access to data requirement in Law of the National System of Investigation and Intelligence in Public Security Matters

On 1 July 2025, the Law of the National System of Investigation and Intelligence in Public Security Matters was adopted by the Senate. The law grants the Secretariat of Security and Citizen Protection (SSPC) the authority to collect and centralise data from public and private entities through a Central Intelligence Platform managed by the National Intelligence Centre. The system may gather vehicle registrations, property data, telecommunications information, biometric records, and commercial ...

✓ ✓ OfficialNational Strategycomunicacionsocial.senado.gob.mx ↗

29 NOV 2024 · Law / Act

Decree reforming, adding and repealing various provisions of the Organic Law of the Federal Public Administration

On 29 November 2024, the Decree reforming, adding and repealing various provisions of the Organic Law of the Federal Public Administration was implemented following its publication in the Official Journal of the Federation on the previous day. The Decree restructures the Federal Executive and its constituent bodies, including creating the new Ministry of Anticorruption and Good Governance and the Agency of Digital Transformation and Telecommunications. The Ministry will be tasked with promoti...

✓ ✓ OfficialNational Strategyinternet2.scjn.gob.mx ↗

27 NOV 2024 · Other

Supreme Court decision about data controllership of search engine managers under Federal Data Protection Law (FLPPDPP)

On 27 November 2024, the Supreme Court of Mexico ruled that search engine operators can not be considered data controllers under the Federal Law on the Protection of Personal Data Held by Private Parties (FLPPDPP). The Court determined that search engine providers do not exercise control over the personal data processed through their services, as they do not determine the content displayed in search results or the purposes of data processing. The Court thus recognised search engine providers ...

10 NOV 2024 · Executive Order

Second resolution of modifications to miscellaneous fiscal Resolution for 2024 including definition of intermediation of digital services

On 11 October 2024, the second resolution of modifications to fiscal resolution for 2024 including withholding tax enters into force. It clarifies the definition of digital intermediation services under the Mexican value-added tax (VAT) law. It applies to non-resident digital platforms that facilitate transactions between sellers and buyers in exchange for payment or compensation. It specifies that platforms qualify as intermediaries even if they present themselves as mere online stores or ag...

Data Privacy & Protection ·Generative AIpriv.gc.ca ↗

28 OCT 2024 · Other

Global data protection authorities issue statement on data scraping, covering AI

This Concluding Statement builds on the Joint statement on data scraping and the protection of privacy (the Initial Statement), published August 24, 2023, which highlighted the following key messages:

04 SEP 2024 · Other

Federal Telecommunications Institute investigation into manufacturers's compliance with code for cybersecurity of the Internet of Things

On 9 April 2024, the Mexican Federal Telecommunications Institute (IFT) closed its investigation into the cybersecurity of Internet of Things (IoT) devices marketed in Mexico. This comprehensive analysis targeted 348 manufacturers or brands, assessing their adherence to the Code of best practices for cybersecurity of the Internet of Things, published by the IFT. The findings revealed that 8% of the brands lacked any cybersecurity information for their devices, highlighting issues such as the ...

National Strategyciberseguridad.ift.org.mx ↗

17 JUL 2024 · Law / Act

General Law on Neuro-Rights and Neurotechnologies

On 17 July 2024, the General Law on Neuro-Rights and Neurotechnologies was introduced to the Senate of Mexico. The Law aims to establish a legal framework for the protection of human rights in the context of neurotechnological advances. It covers a range of activities related to the development and use of neurotechnologies, ensuring the protection of human dignity, privacy, autonomy, and integrity. The Law sets out principles for equitable access, confidentiality, governance, and compliance, ...

National Strategypleno.senado.gob.mx ↗

14 JUL 2024 · Other

INAI investigation into Ticketmaster's compliance with cybersecurity measures to safeguard personal data

On 14 July 2024, the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) opened an ex officio investigation into Ticketmaster for the alleged disclosure of personal data. The investigation was opened due to concerns that Ticketmaster, an e-commerce platform intermediary specialising in ticket sales for entertainment events, may have violated the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). The LFPDPPP mandates that en...

National Strategyhome.inai.org.mx ↗

09 JUN 2024 · Other

Guidelines for Certification Scheme of Persons in the Protection of Personal Data

On 6 September 2024, the National Institute of Transparency, Access to Information and Personal Data Protection (INAI) issued the Guidelines for Certification Scheme of Persons in the Protection of Personal Data. Personal data protection certification is a process intended to recognise demonstrated compliance with data protection obligations. The Guidelines outline the conditions, policies, methods, rules, requirements, criteria, manuals, and procedures necessary for the operation of the cert...

National Strategysenado.gob.mx ↗

03 JUN 2024 · Law / Act

Decree amending Article 11 of General Law on Humanities, Science, Technology, and Innovation

On 6 March 2024, a draft decree to amend the General Law on Humanities, Science, Technology, and Innovation by adding a new section, VIII Bis, was introduced to the Senate of Mexico. This amendment focuses on the study, research, and development of knowledge in artificial intelligence (AI) and the training of professionals in this field. The proposed amendment emphasises the transformative impact of AI on society and the economy, highlighting its role in driving technological innovation, impr...

National Strategyricardomonrealavila.com ↗

AI authority governance in Federal Law Regulating Artificial Intelligence

On 28 February 2024, the Federal Law Regulating Artificial Intelligence, including AI authority governance, was introduced to the Senate of Mexico. The proposed law aims to establish a legal framework to regulate the development, deployment and use of Artificial Intelligence systems (AI) in the country. The law would designate the Federal Institute of Telecommunications (IFT) as the competent authority on AI matters and establish the National Commission on Artificial Intelligence as an advis...

National Strategyricardomonrealavila.com ↗

Design requirements in Federal Law Regulating Artificial Intelligence

On 28 February 2024, the Federal Law Regulating Artificial Intelligence, including design requirements, was introduced to the Senate of Mexico. The proposed law aims to establish a legal framework to regulate the development, deployment and use of artificial intelligence (AI) systems in the country. The law would require the protection of human rights in any AI application and impose obligations on providers and users based on the level of risk generated by the AI system. The law classifies a...

Intellectual Propertyricardomonrealavila.com ↗

Copyright protection regulation in Federal Law Regulating Artificial Intelligence

On 28 February 2024, the Federal Law Regulating Artificial Intelligence, including copyright protection regulation, was introduced to the Senate of Mexico. The proposed law aims to establish a legal framework to regulate the development, deployment and use of artificial intelligence (AI) systems in the country. In particular, Article 18 requires explicit indication in the corresponding registration if an artistic work or any other type of content, whether written or audiovisual, for intellect...

National Strategyricardomonrealavila.com ↗

Prohibition of goods and services in Federal Law Regulating Artificial Intelligence

On 28 February 2024, the Federal Law Regulating Artificial Intelligence, prohibition of goods and services, was introduced to the Senate of Mexico. The law classifies artificial intelligence (AI) systems according to their level of risk into "unacceptable", "high", and "low or minimal". AI systems that pose an unacceptable risk are those capable of causing severe physical or psychological harm to individuals or utilising biometric identification without consent. The sale, distribution, and ...

National Strategypleno.senado.gob.mx ↗

Decree amending Article 30 and Article 86 of the General Law of Education

On 28 February 2024, the decree amending Article 30 and Article 86 of the General Law of Education was introduced to the Senate of Mexico. The Decree aims to modernise education by emphasising the responsible use, comprehension, and application of AI. The decree would require the inclusion of AI-related content in curricula and programmes and the promotion of AI training. The proposed decree aims to establish the basis for the formulation, implementation, and evaluation of public policies rel...

27 FEB 2024 · Law / Act

Mexico Proposes Groundbreaking AI Regulation Bill Aligned with EU, Chile Models

Primary source (bnnbreaking.com) dated 27 February 2024 in MX. See linked source for full text.

Generative AI ·Data Privacy & Protection ·Cybersecuritybnnbreaking.com ↗

14 FEB 2024 · Law / Act

Decree to amend General Law on Women's Access to a Life Free from Violence and the Federal Penal Code to include digital sexual violence

On 14 February 2024, the Decree to amend the General Law on Women's Access to a Life Free from Violence and the Federal Penal Code to include digital sexual violence was introduced to the Senate of Mexico. The degree aims to address the misuse of digital technologies, such as artificial intelligence (AI) and deepfakes, which have facilitated new forms of violence against women. The proposed decree aims to incorporate the notion of “digital falsification media”, defined as technology that uses...

Content Moderationpleno.senado.gob.mx ↗

13 FEB 2024 · Other

COFECE Competition investigation into e-commerce market

On 13 February 2024, the Mexican Competition Commission (Cofece) issued a preliminary finding in its investigation (IEBC-001-2022) into competition barriers in the e-commerce market. Cofece found, on a preliminary basis, the absence of effective competition conditions in the market due to high concentration, network effects, and further barriers, such as technological capacity and advertising investment. Possible barriers to entry include artificiality in components of some loyalty programmes...

Competitioncofece.mx ↗

01 AUG 2023 · Other

Report on INAI enforcement of data protection violations in 2022

On 8 January 2023, the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) in Mexico published a report delineating its enforcement actions and the imposed fines, amounting to MXP 60 million, against individuals and legal entities for violations of the Federal Law on the Protection of Personal Data Held by Individuals (LFPDPPP) in 2022. The fines were imposed across a range of sectors, with the highest number of sanctions being applied to those ope...

✓ ✓ OfficialNational Strategyhome.inai.org.mx ↗

02 JUL 2023 · Executive Order

Mexico: Agreement approving interpretation criteria for personal data protection laws

On 7 February 2023, the Mexican National Institute for Access to Information and Protection of Personal Data (INAI) published the “Agreement through which it approved the criteria for interpretation pursuant to Article 199 and 200 of the General Law on Transparency and Access to Public Information of 4 May 2015, as amended, and Articles 144 and 145 of the Federal Law on Protection of Personal Data Held by Private Parties”. The Agreement incorporates several headings and control codes regulati...

✓ ✓ OfficialNational Strategypdpc.gov.sg ↗

12 JAN 2023 · Other

Singapore-Mexico Memorandum of Understanding on cooperation on personal data protection

On 1 December 2023, Singapore's Personal Data Protection Commission (PDPC) and Mexico's National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) signed a Memorandum of Understanding to improve collaboration on personal data protection. The PDPC and INAI agreed to collaborate on the development of compatible data transfer mechanisms, support for technological innovation, information sharing, best practices exchange, and joint research on emerging privacy ...

12 JAN 2022 · Executive Order

IFT Code of Best Practice for the Cybersecurity of Internet of Things (IoT) Devices

On 1 December 2022, the Mexican Federal Telecommunications Institute (IFT) implemented the Code of Best Practice for the Cybersecurity of Internet of Things (IoT) Devices. The Code is applicable to IoT Device Manufacturers, licensees and authorised parties providing internet access, as well as those providers of applications, content and/or service, and any other natural or legal person who develops and provides applications or services for IoT devices. The Code issues recommendations and bes...

✓ ✓ OfficialNational Strategyciberseguridad.ift.org.mx ↗

14 DEC 2021 · Other

INAI and IFT cooperation agreement

On 14 December 2021, Mexico’s National Institute for Transparency, Access to Information and Personal Data Protection (INAI) and the Federal Telecommunications Institute (IFT) signed a General Collaboration Agreement to strengthen the cooperation between the two executive agencies and promote institutional transparency. In particular, the institutions will work on improving access to information, protection of personal data, open data, increasing accountability and promoting the responsible a...

✓ ✓ OfficialNational Strategyhome.inai.org.mx ↗

Content Moderationricardomonrealavila.com ↗

Content moderation requirement in Amendment of Federal Law of Telecommunications

On 31 August 2021, the amendment to the Mexican Federal Law of Telecommunications and Broadcasting was rejected after failing to be passed by the Congress before the end of the LXIV legislature. The amendment targeted the category of “relevant social network providers”, including social media platforms with over a million users in Mexico. The amendment would have requires relevant social network providers to remove certain types of unlawful content, including "hate speech", "fake news" and ot...

Content Moderationricardomonrealavila.com ↗

Expansion of oversight power in Amendment of Federal Law of Telecommunications

On 31 August 2021, the amendment to the Mexican Federal Law of Telecommunications and Broadcasting was rejected after failing to be passed by Congress before the end of the LXIV legislature. The amendment targeted the category of “relevant social network providers”, including social media platforms with over a million users in Mexico. The amendment would have expanded the regulatory power of the Federal Telecommunications Institute (IFT) in the areas of licensing, content moderation and user ...

National Strategyinfosen.senado.gob.mx ↗

Data breach notification requirement in proposed data protection reform

On 31 August 2021, the amendment to the Federal Law on the Protection of Personal Data Held by Private Parties ("data protection law") was rejected after failing to be passed by Congress before the end of the LXIV legislature. Senator José Alberto Galarza Villaseñor introduced the initiative to increase data security and breach notifications, requiring the reporting of breaches within 72 hours to both the data owner and the National Institute of Transparency, Access to Information and Protect...