Mexico: Federal Law on the Protection of Personal Data Held by Private Parties entered into force

On 21 March 2025, the Mexico Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The law establishes data processing principles such as lawfulness, purpose limitation, consent, data quality, proportionality, and accountability. It establishes protections for sensitive and financial information, requiring explicit consent from individuals for processing such data. Private entities are mandated to provide comprehensive privacy notices, delineating data usage, storage, processing, and rights mechanisms. Under the law, individuals are granted the right to access, correct, delete, and object to data processing. For international data transfers, equivalent protection must be guaranteed by recipients.