Legal Information

National Legislation

Federal Legislation

• Political Constitution of the Mexican United States (Art. 16 section first, second, twelfth and thirteenth)
• Federal Law on Protection of Personal Data Held by Private Parties (In force since 28 April, 2010)
• Regulation of the Federal Law on Protection of Personal Data Held by Private Parties (In force since 20 December, 2011)
• General Law for the Protection of Personal Data in Possession of Public Entities (In force since 27 January 2017).

State Legislation

• Data Protection Law of the Federal District (Mexico City Official Gazette 3 October 2008)
• Data Protection Law for the State of Colima (Decree No. 356)
• Data Protection Law for the State and Municipalities of Guanajuato (Decree No. 266)
• Law of Civil Liability for the Protection of the Private Life, Honor and Self-image in the Federal District (May 19, 2006) 

National Jurisprudence

• Privacy & Data Protection Jurisprudence (Updated until August 2013)

International and Regional Conventions

International Conventions

• The Universal Declaration of Human Rights (December 10, 1948) (Article 12)
• The International Covenant on Civil and Political Rights (December 16, 1966) (Article 17)
• The United Nations Convention on the Rights of the Child (Adopted on 20 November 1989, in force from 2 September 1990) (Article 16)

Regional Conventions

America

• Interamerican Convention on Human Rights (Signed on 22 November, 1969; in force from 18 July 1978) (Article 11)

Europe

• The European Convention for the Protection of Human Rights and Fundamental Freedoms (1 June, 2000) (Art. 8)
• The Treaty of the Functioning of the European Union (Art. 16)
• Charter of Fundamental Rights of the European Union (Arts. 7 and 8)
• The Council of Europe Convention for the Protection of Individuals with Regard to the Automatic Processing of Personal Data (Convention No. 108, 28 January 1981)
• Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data regarding supervisory authorities and transborder data flows (November 8, 2001)

International and Regional Guidelines

• The Organisation for Economic Cooperation and Development (OECD) Guidelines on the Protection of Privacy and Transborder Flows of Personal Data (23 September 1980)
• The United Nations Guidelines Concerning Computerized Personal Data Files (Adopted by the General Assembly on 14 December 1990)
• Asia-Pacific Economic Cooperation (APEC) “APEC Privacy Framework” (Approved November 2004)
• International Standards on Privacy and Data Protection (The Madrid Resolution Approved on 5 November 2009)
• Standards for Personal Data Protection for Ibero-American States (Approved on June 20, 2017 during the XV Meeting of the Ibero-American Data Protection Network) (English Version)

European Directives and Regulations

Directives

• Directive 97/66/EC of the European Parliament and of the Council of 15 December 1997 concerning the processing of personal data and the protection of privacy in the telecommunications sector
• Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications)
• Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA

Regulations

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (In force from May 25, 2018)

• Regulation (EC) 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data