Mexico: Implemented Federal Law on the Protection of Personal Data Held by Private Parties (2010) including data transfer regulation

On 5 July 2010, the Mexican Federal Law on the Protection of Personal Data Held by Private Parties was implemented. The law regulates cross-border data transfers which is only allowed if the data subject consents and the recipient is subject to equivalent protection duties as those imposed on the data processor. The law foresees legal instruments to establish equivalent protection, such as contractual clauses, but does not foresee an adequacy mechanism.