Annex
Mexico Privacy Regulatory Requirements
This annex defines the privacy regulatory requirements applicable to the processing of personal data held by private parties in Mexico under the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP). It supplements the Privacy and Data Governance Policy and the Privacy Impact and Cross-Border Transfer Procedure.
- Type
- Annex
- Version
- 0.0.4
- Date
- 2026-09-12
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Applicable law and regulatory authority
- Principles, lawful basis, and privacy notice
- Data-subject rights (ARCO)
- Cross-border transfers
- Security and breach
- Enforcement and penalties
- Employment and workforce monitoring
- Limitations
Related documents
- Privacy Jurisdiction Indexprivacy
- Privacy and Data Governance Policyprivacy
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Latin America Privacy Regulatory Requirementsprivacy
- Global Regulatory Applicability Registercompliance
Next
All Documents