29.1.2026

Mexico’s Ministry of Anti-Corruption and Good Governance Launches Dialogue to Update the Personal Data Protection Framework

Conversation on Reforms to the Federal Economic Competition Act

Mexico’s Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno – SABG) has announced the launch of a dialogue process aimed at updating the regulatory framework governing the protection of personal data held by private parties. The stated objective is to align Mexican law with international standards and to strengthen preventive compliance mechanisms. This regulatory agenda forms part of the country’s new institutional architecture, which grants SABG authority over transparency and personal data protection matters and includes a Personal Data Protection Unit with normative powers, signaling forthcoming changes to compliance obligations, oversight, and regulatory expectations.

According to the official announcement, potential areas of reform include the incorporation of privacy by design and by default principles, the requirement to conduct Data Protection Impact Assessments (DPIAs) for intensive or high-risk processing activities, and the introduction of the Data Protection Officer (DPO) as a designated role responsible for overseeing compliance, coordinating internal training, and serving as a liaison with the authority. These elements are consistent with international standards and regulatory models that emphasize proactive accountability and risk prevention.

To be prepared for this scenario, we recommend reviewing and strengthening compliance programs and controls in the area of data protection.

Our firm has extensive experience in the design and implementation of data protection compliance programs, DPIAs, DPO operating models, audits, regulatory risk management, and support in regulatory engagement and consultation processes with authorities. We are well positioned to assist organizations in anticipating regulatory change, mitigating compliance risks, and transforming compliance into a strategic advantage.

We also remain attentive to regulatory changes promoted by the SABG in the exercise of its powers in this area.

For any questions or comments, you can contact our expert team.

Go back

Awards

The awards we have received support our dedication to excellence in every practice area.

MIJARES, ANGOITIA, CORTÉS AND FUENTES

WE STAND OUT AS PIONEERS

AND LEADERS IN OUR FIELD,

ALWAYS AT THE FOREFRONT.
Contact us

tidings

Other related news

See news
Get information about everything related to the legal world, news and client alerts.
On March 20, 2025, a decree was published in the Diario Oficial de la Federación (Official Gazette of the Federation) introducing significant reforms in the areas of transparency and data protection. This decree includes the enactment of the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Entities, and the Federal Law on the Protection of Personal Data Held by Private Entities. Additionally, it amends Article 37, Section XV, of the Organic Law of the Federal Public Administration.
On June 30, 2025, the Federal Official Gazette published General Agreement 8/2025, issued by the Plenary of the Federal Judiciary Council. This agreement designates specialized judicial bodies to handle amparo proceedings related to public access to information and personal data protection, in compliance with the Twentieth Transitory Article of the Decree published on March 20, 2025.