Mexico City, February 17th 2025
On February 6, 2025, the “GUIDELINES for the Implementation and Operation of Llave MX” were published in the Official Gazette of the Federation, aiming to regulate the implementation of the «Llave MX» identity authentication mechanism.
This identification mechanism allows individuals and legal entities to manage procedures, services, and social programs through the digital channels enabled by federal agencies, decentralized bodies, and entities of the Federal Public Administration.
The Digital Transformation and Telecommunications Agency will be responsible for managing and operating the platform, available at https://www.llave.gob.mx.
Access Levels for Llave MX
Llave MX will offer two access levels: Llave MX Básica and Llave MX Verificada, each with different verification and authentication mechanisms.
- Llave MX Básica will allow users to access digital channels using their credentials to carry out procedures, access services, or participate in social programs fully online, provided the nature of the procedure allows it. Otherwise, they may initiate the process digitally and complete it in person.
- Llave MX Verificada will include additional identity verification controls and the option to integrate an electronic signature. Federal agencies and entities will determine whether a procedure, service, or program requires Llave MX Básica or Llave MX Verificada. In the latter case, the necessary verification factor will be specified at the start of the request, and the platform will provide the means to complete the verification within the same site.
The Digital Transformation and Telecommunications Agency, in coordination with federal agencies, decentralized administrative bodies, and entities of the Federal Public Administration, will oversee the progressive digitalization of procedures and services.
Thus, through the Mexican Government’s Unified Portal (https://www.gob.mx), the Digital Transformation Agency will publish the procedures, services, and social programs available through Llave MX on the government’s digital channels.
Information Security and Data Protection
The guidelines establish that the Digital Transformation Agency will implement measures to ensure information security and personal data protection, including:
- Technical, physical, and administrative measures to guarantee the integrity and confidentiality of personal data processing.
- Effective mechanisms to exercise rights of access, rectification, cancellation, opposition, and portability.
- Access control and digital authentication mechanisms within Llave MX.
- Information security measures to safeguard user data.
- Procedures for storing information related to the creation and verification of Llave MX accounts.
The Digital Transformation Agency will be responsible for processing personal data within the platform and will operate a Personal Data Security Management System in accordance with the General Law on Personal Data Protection Held by Obligated Entities.
The data collected for the creation of Llave MX may be preloaded into request forms for procedures, services, or social programs available through the Mexican Government’s digital channels.
Our regulatory law, data protection, and constitutional law attorneys are available for any questions regarding this matter.
Sincerely,
Adolfo Athié Cervantes
Diana Rangel León
Renata Denisse Buerón Valenzuela
Daniela Pineda Robles
Erika Itzel Rodríguez Kushelevich
César Augusto Reyes
creyes@basham.com.mx
Ivan García Argueta
Ricardo Tagle Pastén
