🇲🇽
Mexico
Ley Federal de Protección de Datos Personales (LFPD)
Americas🟢 Comprehensive
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
INAI (National Institute for Transparency)
Overview
Mexico's LFPD, effective 2010, is a comprehensive data protection law that applies to both public and private sectors. The INAI is the independent authority responsible for enforcement.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Mexico?+
Mexico is governed by the Ley Federal de Protección de Datos Personales (LFPD). The law is enforced by the INAI (National Institute for Transparency). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Mexico require a Data Protection Officer (DPO)?+
Yes, under the Ley Federal de Protección de Datos Personales (LFPD), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Mexico?+
Partially. While Ley Federal de Protección de Datos Personales (LFPD) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Mexico?+
Under the Ley Federal de Protección de Datos Personales (LFPD), organizations must notify the INAI (National Institute for Transparency) and affected individuals without undue delay in the event of a personal data breach.