Mexico: Cybersecurity regulation in Federal Law on Protection of Personal Data Held by Private Parties
Progress
Scope
Timeline of events
Federal Law on the Protection of Personal Data Held by Private Parties including cybersecurity regulation enters into force
On 21 March 2025, the Mexico Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The proposed legislation requires data controllers to implement administrative, technical and physical measures to ensu…
SourceFederal Law on the Protection of Personal Data Held by Private Parties including cybersecurity regulation was signed by president
On 20 March 2025, the President signed into law the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), following its adoption by the legislature. The publication is part of a broader legislative package that includes t…
SourceDraft Decree on the Protection of Personal Data Held by Private Parties including cybersecurity regulation was passed by Senate of the Mexican Congress
On 4 March 2025, The Draft Decree on the Protection of Personal Data Held by Private Parties was passed by the Senate of the Mexican Congress. The proposed legislation would require data controllers to implement administrative, technical and physica…
SourceInitiative with Draft Decree on the Protection of Personal Data Held by Private Parties including cybersecurity regulation was introduced to Senate of the Mexican Congress
On 25 February 2025, the initiative with the draft decree on the Protection of Personal Data Held by Private Parties was submitted to the Senate of the Mexican Congress. The proposed legislation would require data controllers to implement administra…
Source