north america
Mexico
Mexico's federal private-sector privacy law established one of the earliest comprehensive data protection frameworks in the region, but users should distinguish it from Mexico's separate public-sector transparency and data rules.
Editorial caveat
Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.
medium confidence, Public comparison should distinguish Mexico's private-sector federal regime from separate public-sector transparency and data frameworks.
Breach
- Breach deadline (hours)
- 0
- Breach notification required
- Yes
Marketing
- Cookie consent rule
- Privacy notices and consent expectations shape cookie deployment and online tracking disclosures.
Transfers
- Cross-border transfer restricted
- Yes
- Data localization required
- No
Governance
- DPO required
- No
- Impact assessment required
- No
- Records of processing required
- No
Identity
- Effective date
- 2010-07-06
- Effective status
- in-force
- Last amended
- 2017-01-26
- Law status
- active
Scope
- Extraterritorial application
- No
- Private sector coverage
- Applies to private parties processing personal data, excluding credit bureaus and some special sectors with separate rules.
- Public sector coverage
- Public-sector privacy is governed through separate transparency and public-sector data regimes.
- Territorial scope
- Applies to private parties processing personal data in Mexico and governs domestic and international transfers.
Legal Basis
- Legal bases
- consent, statutory exception, contractual necessity
- Requires legal basis
- Yes
Enforcement
- Maximum fine
- Administrative fines can be significant and may be doubled for sensitive data violations.
- Private right of action
- Yes
- Regulator or enforcement authority summary
- INAI
Definitions
- Personal data definition
- Personal data means any information concerning an identified or identifiable individual.
- Sensitive data recognized
- Yes
Rights
- Right of access
- Yes
- Right to appeal
- Yes
- Right to deletion
- Yes
- Right to erasure or delete summary
- Cancellation right under ARCO
- Right to object
- Yes
- Right to portability
- No
- Right to rectification or correction summary
- Rectification right under ARCO
Official sources
- INAI guidanceSecondary official material • en • html
- LFPDPPP textPrimary official law • en • html