Áreas de práctica

Data Protection

We provide comprehensive advice on personal data protection and cybersecurity, combining consulting, operational implementation, and defense in administrative and litigation proceedings.
Contáctanos

Our Data Protection practice provides comprehensive advice on regulatory compliance, the operational management of personal data, and the handling of contingencies related to privacy and cybersecurity.

We advise national and international organizations on legal audits, the implementation of compliance programs, data transfers, and the management of data breaches. We also support our clients in the day-to-day management of personal data relating to employees, customers, suppliers, and third parties, including sensitive and financial data.


We have experience across various sectors, including financial institutions, insurance, telecommunications, retail, advertising, and education, as well as in representing clients in administrative proceedings and litigation before regulatory authorities and specialized courts.

Our Data Protection team

Our Data Protection practice provides comprehensive advice on regulatory compliance, the operational management of personal data, and the handling of contingencies related to privacy and cybersecurity.

We advise national and international organizations on legal audits, the implementation of compliance programs, data transfers, and the management of data breaches. We also support our clients in the day-to-day management of personal data relating to employees, customers, suppliers, and third parties, including sensitive and financial data.


We have experience across various sectors, including financial institutions, insurance, telecommunications, retail, advertising, and education, as well as in representing clients in administrative proceedings and litigation before regulatory authorities and specialized courts.

Diseño y estructuración de programas de cumplimiento:
Asesoramos en la creación de sistemas de gestión de cumplimiento que integren políticas, controles, mecanismos de supervisión y estructuras de gobernanza acordes con el perfil de riesgo de cada organización.
Diseño y estructuración de programas de cumplimiento:
Asesoramos en la creación de sistemas de gestión de cumplimiento que integren políticas, controles, mecanismos de supervisión y estructuras de gobernanza acordes con el perfil de riesgo de cada organización.
Diseño y estructuración de programas de cumplimiento:
Asesoramos en la creación de sistemas de gestión de cumplimiento que integren políticas, controles, mecanismos de supervisión y estructuras de gobernanza acordes con el perfil de riesgo de cada organización.
Diseño y estructuración de programas de cumplimiento:
Asesoramos en la creación de sistemas de gestión de cumplimiento que integren políticas, controles, mecanismos de supervisión y estructuras de gobernanza acordes con el perfil de riesgo de cada organización.

Alcance de la práctica

La práctica de Cumplimiento Normativo aborda el cumplimiento normativo desde una perspectiva transversal, integrando distintas áreas del derecho que inciden en la gestión de riesgos regulatorios dentro de las organizaciones.

Nuestro trabajo permite a las empresas:
01
Identificar, prevenir y gestionar sus riesgos regulatorios.
02
Fortalecer sus sistemas internos de control.
03
Estructurar mecanismos consistentes de supervisión y reporte.
04
Alinear sus sistemas de cumplimiento con sus procesos operativos y de toma de decisiones.
La práctica opera en estrecha coordinación con las áreas de Fiscal, Laboral, Competencia Económica, Comercio Exterior, Protección de Datos y otras especialidades del despacho. Este modelo de trabajo integrado - no en silo - permite atender con eficiencia y profundidad los temas de cumplimiento que involucran múltiples marcos regulatorios o sectores económicos, ofreciendo al cliente una solución jurídica coherente y de calidad.

Proyectos representativos

Proyectos representativos

Proyectos representativos

Heading

This is some text inside of a div block.

Ejemplo texto

Botón

Huawei Technologies Co., Ltd.

Cybersecurity and Cross-Border Data Transfers | Mexico / International

We advised Huawei on a comparative legal analysis of international cybercrime frameworks and their implications for Mexico-related operations. The work addressed government access to data, international cooperation mechanisms, and their impact on incident response processes and cross-border data transfers in multi-jurisdictional settings.

Izzi

Data Protection and Digital Compliance | Mexico

We advised Izzi on the update of its data protection transparency framework, including privacy notices, cookie policies, and consent mechanisms across complex digital environments. The work covered profiling, tracking, and data-sharing practices, aligning public disclosures with actual data flows and applicable regulatory criteria.

Premios

Nuestra Firma ha recibido diversos premios y reconocimientos

Estos premios reflejan nuestro compromiso con la excelencia y liderazgo en el ámbito legal.

Team

Our Data Protection team

Our team brings together experience in regulation, technology, and compliance, combining a deep understanding of the data protection framework with the practical management of privacy and cybersecurity risks.

No items found.

MIJARES, ANGOITIA, CORTÉS AND FUENTES

WE STAND OUT AS PIONEERS

AND LEADERS IN OUR FIELD,

ALWAYS AT THE FOREFRONT.
Contact us

Noticias

noticias relacionadas con el área de práctica

Ver noticias
Infórmate de todo lo relacionado con el mundo legal, noticias y client alerts.
August 31, 2026
On August 30, 2026, President Claudia Sheinbaum submitted a bill to the Senate (the "Bill") amending the Foreign Investment Law (the "LIE" per its acronym in Spanish) with the purpose of creating a national security screening process for the acquisition of Mexican companies by foreign investors.
August 26, 2026
On August 17, 2026, the Ministry of Energy (“SENER”, per its acronym in Spanish) published in the Federal Official Gazette the Provisions setting forth the requirements for the purchase of Clean Energy Certificates for the years 2025 and 2026 (the "Provisions").
August 21, 2026
On August 4, 2026, the Decree issuing the Regulation for the Determination and Payment of the Non-Forfeiture Guarantee Fee for National Water Rights (the “Regulation”) was published in the Official Gazette of the Federation (the “OGF”). The Regulation entered into force on August 5, 2026, and repealed the previous regulation published in the OGF on May 27, 2011, subject to the exceptions described below.

Practice Area

Data Protection

We provide comprehensive advice on personal data protection and cybersecurity, combining consulting, operational implementation, and defense in administrative and litigation proceedings.

Contact us

Our Data Protection practice provides comprehensive advice on regulatory compliance, the operational management of personal data, and the handling of contingencies related to privacy and cybersecurity.

We advise national and international organizations on legal audits, the implementation of compliance programs, data transfers, and the management of data breaches. We also support our clients in the day-to-day management of personal data relating to employees, customers, suppliers, and third parties, including sensitive and financial data.


We have experience across various sectors, including financial institutions, insurance, telecommunications, retail, advertising, and education, as well as in representing clients in administrative proceedings and litigation before regulatory authorities and specialized courts.

Our services:

We advise companies on the comprehensive management of personal data protection, covering regulatory, operational, and contentious aspects.
  • Data protection diagnostics and audits: Identification of personal data processing activities, analysis of applicable obligations, and risk assessment, with specific recommendations to address identified gaps.
  • Design and implementation of compliance programs: Development of internal policies, privacy notices, governance structures, and accountability measures aligned with applicable regulations.
  • Data inventory and information flow management: Inventory and analysis of physical and electronic databases, as well as data storage, use, and transfer processes.
  • Data transfers and third-party relationships: Structuring of agreements and mechanisms for the communication and transfer of personal data, including domestic and cross-border arrangements.
  • Data subject rights (ARCO) management: Design and implementation of procedures for access, rectification, cancellation, and opposition rights.
  • Information security and incident response: Design of security measures, data breach response protocols, and support in incident notification and management.
  • Administrative proceedings and data protection litigation: Representation before regulatory authorities and courts in matters related to data protection compliance.
  • Privacy and cybersecurity advisory: Ongoing advice on day-to-day compliance operations, including the management of personal data in digital and technological environments.

Cliente satisfecho estrechando la mano con un abogado: Cliente feliz con servicio legal en Mijares, Angoitia, Cortés y Fuentes S.C.

Awards and Recognitions

Our Firm has received several awards and recognitions that reflect our commitment to excellence and leadership in the legal field.

Scope of our practice

Our practice is defined by a practical, application-driven approach, combining regulatory compliance with readiness for investigations and contingency scenarios.

We support clients operating in complex, high-volume data environments, including digital business models, cross-border data transfers, and multi-vendor ecosystems, integrating regulatory requirements with the operational needs of each business.

No items found.
No items found.
No items found.

Representative projects

Huawei Technologies Co., Ltd.

Cybersecurity and Cross-Border Data Transfers | Mexico / International

We advised Huawei on a comparative legal analysis of international cybercrime frameworks and their implications for Mexico-related operations. The work addressed government access to data, international cooperation mechanisms, and their impact on incident response processes and cross-border data transfers in multi-jurisdictional settings.

Izzi

Data Protection and Digital Compliance | Mexico

We advised Izzi on the update of its data protection transparency framework, including privacy notices, cookie policies, and consent mechanisms across complex digital environments. The work covered profiling, tracking, and data-sharing practices, aligning public disclosures with actual data flows and applicable regulatory criteria.

Equipo

Our Data Protection team

Our team brings together experience in regulation, technology, and compliance, combining a deep understanding of the data protection framework with the practical management of privacy and cybersecurity risks.

No items found.

MIJARES, ANGOITIA, CORTÉS AND FUENTES

WE STAND OUT AS PIONEERS

AND LEADERS IN OUR FIELD,

ALWAYS AT THE FOREFRONT.
Contact us

News

legal news and updates

See news
Get information about everything related to the legal world, news and client alerts.
August 31, 2026
On August 30, 2026, President Claudia Sheinbaum submitted a bill to the Senate (the "Bill") amending the Foreign Investment Law (the "LIE" per its acronym in Spanish) with the purpose of creating a national security screening process for the acquisition of Mexican companies by foreign investors.
August 26, 2026
On August 17, 2026, the Ministry of Energy (“SENER”, per its acronym in Spanish) published in the Federal Official Gazette the Provisions setting forth the requirements for the purchase of Clean Energy Certificates for the years 2025 and 2026 (the "Provisions").
August 21, 2026
On August 4, 2026, the Decree issuing the Regulation for the Determination and Payment of the Non-Forfeiture Guarantee Fee for National Water Rights (the “Regulation”) was published in the Official Gazette of the Federation (the “OGF”). The Regulation entered into force on August 5, 2026, and repealed the previous regulation published in the OGF on May 27, 2011, subject to the exceptions described below.
Contact
Data Protection
Select a language:
Thank you for getting in touch! Soon we will contact you.
Oops! Something went wrong while submitting the form.
Contacto
Data Protection