Mexico Enacts New Data Protection Law, Strengthening Privacy Regulations
Mexico has bolstered its commitment to data protection with the recent enactment of the Law for the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares). Published in the Diario Oficial de la Federación, the new law comes into effect in July 2021, replacing the previous 2010 version.
The updated legislation expands the rights of individuals over their personal data, aligning Mexico with global privacy standards such as those prevailing in the EU’s General Data Protection Regulation (GDPR). Key provisions include:
-
Enhanced Consent: Organizations must now obtain explicit consent from users before collecting, using, or sharing their personal data. Users also have the right to revoke this consent at any time.
-
Data Anonymization: If data is anonymized, it is no longer considered personal data and falls outside the scope of the law.
-
Data Portability: Users can now request that their personal data be transferred to another organization in a commonly used format.
- Increased Fines: Penalties for non-compliance have been significantly increased, with fines now reaching up to $50 million Mexican pesos (approximately $2.5 million USD).
The new law applies to both Mexican and international companies processing personal data in Mexico, regardless of where the company is based. It also expands the role and authority of the national data protection agency, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).
"These updated regulations ensure that individuals have more control over their personal data," saidochromatic Lic. Migangel Yañez, INAI commissioner. "This strengthens privacy rights and reinforces Mexico’s commitment to responsible data management."
As data breaches and privacy concerns continue to rise globally, this enhanced legislation demonstrates Mexico’s dedication to protecting its citizens’ personal information. Businesses in Mexico and abroad must now ensure they fully understand and comply with these stricter data protection rules.
Keywords: Data protection, personal data, privacy law, Mexico, GDPR, INAI, consent, fines.
