Mexico LFPDPPP 2025
In force Mexico · In force Mar 21, 2025 · no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
New federal private-sector data protection law replacing the 2010 law after the dissolution of INAI; keeps the ARCO rights and privacy-notice model, broadens the personal data definition and moves enforcement to the Secretaría Anticorrupción y Buen Gobierno.
- Who it applies to
- Private individuals and legal entities processing personal data in Mexico (credit bureaus and purely personal/domestic processing excluded).
- Penalties
- Fines from 100 to 320,000 times the UMA depending on the infraction (100-160,000 UMA for fractions II-VII; 200-320,000 UMA for fractions VIII-XVIII), doubled for sensitive data; criminal penalties for certain misuse.
- Enforced by
- Secretaría Anticorrupción y Buen Gobierno
- Official name
- Ley Federal de Protección de Datos Personales en Posesión de los Particulares (2025)
- Citation
- DOF 20-03-2025
- Topics
- privacy
Research notes
Implementing regulations (Reglamento) for the 2025 law were reported as still pending in 2026; the 2011 regulations apply where not contrary.
Related
Brazil ECA Digital
Canada Bill C-36 (PPCDA)
Quebec Law 25Questions about Mexico LFPDPPP 2025
- What are the Mexico LFPDPPP 2025 compliance deadlines?
- Mar 21, 2025: New LFPDPPP in force.
- When does Mexico LFPDPPP 2025 take effect?
- Mexico LFPDPPP 2025 took effect on Mar 21, 2025.
- Who does Mexico LFPDPPP 2025 apply to?
- Private individuals and legal entities processing personal data in Mexico (credit bureaus and purely personal/domestic processing excluded).
- What are the penalties under Mexico LFPDPPP 2025?
- Fines from 100 to 320,000 times the UMA depending on the infraction (100-160,000 UMA for fractions II-VII; 200-320,000 UMA for fractions VIII-XVIII), doubled for sensitive data; criminal penalties for certain misuse.