The Federal Law for the Protection of Personal Data Held by Private Parties, enacted on March 20, 2025, establishes comprehensive guidelines for the legitimate, controlled, and informed processing of personal data by private entities in Mexico. It defines key concepts such as consent, sensitive data, ARCO rights (Access, Rectification, Cancellation, and Opposition), and outlines the responsibilities of data controllers. The law also introduces provisions for data blocking, dissociation, and the role of public access sources, aiming to safeguard individuals’ privacy and informational self-determination. Certain entities, like credit reporting agencies and individuals collecting data for personal use without commercial intent, are exempt from this law.
Read more: Federal LAW.pdf
