First announced: Legislative amendments approved in 2025.
Submitted by: NYBACS Compliance Desk
What changed
The reform strengthens requirements for explicit consent, marketing transparency and data subject rights enforcement. Regulators gain clearer authority to impose sanctions.
Who’s affected
Marketing firms, fintech platforms, retailers, telecom providers and foreign entities targeting Mexican consumers.
Immediate actions
• Update opt-in/opt-out mechanisms.
• Review privacy notices and marketing contracts.
• Conduct consent documentation review.
Practical notes & timeline Implementation began following publication in the Federal Gazette. Enforcement actions are expected to increase in 2026.
