🇲🇽 Mexico

Data-protection & privacy developments in Mexico (Americas). Auto-maintained from the daily feeds; add curated notes freely.

Tracker

• Mexico Federal Law on the Protection of Personal Data Held by Private Parties (In effect)
  • This new law, which became effective in March 2025, supersedes the previous Federal Law on the Protection of Personal Data Held by Private Parties. The law sets forth principles for the processing of personal data, including legality, purpose, loyalty, consent, quality, proportionality, information, and responsibility. It requires the data subject’s consent for the processing of personal data, which can be either explicit or tacit. Tacit consent is established when the controller has provided a notice to the data subject and the data subject has not objected to the processing of their data. The processing of sensitive data requires explicit written consent. The law also imposes security measures to safeguard personal data and permits a controller to share personal data with third parties with the data subject’s consent, unless an exception applies. The law includes provisions for fines and criminal penalties for violations.
  • source

🆕 Recent additions (auto)

• 2026-09-07 Let’s put the refrigerator online … — … what could possibly go wrong? More in the linked article.9.1 New Mexico and Meta (Datenzirkus (BvD))
• 2026-09-07 New Mexico and Meta — We had already reported on the first part of the proceedings when Meta was ordered to pay $375 million because it had implemented insufficient measures to protect children. But it went further – Meta must pay another $567 million (Datenzirkus (BvD))

Per-country folder. Curated + auto-enriched.