New laws on Transparency, Access to Public Information, and Protection of Personal Data have come into force in Mexico.
- On December 20, 2024, it was published in the Official Gazette of the Federation (“DOF”) the initiative for constitutional reform in the area of organic simplification, which aimed to eliminate seven autonomous constitutional bodies, including the National Institute of Transparency, Access to Information and Protection of Personal Data ( "INAI,”), with the purpose, according to the explanatory statement of the initiative itself, of rationalizing the public resources that were destined for the operation and functioning of the autonomous constitutional bodies, in order to allow greater investment in social policies and programs.
- The transitional articles of the constitutional reform established that the Congress of the Union had a period of ninety calendar days from its entry into force to make the necessary adjustments to the corresponding laws in order to comply with its content. It also stipulated that, once the legislative changes came into force, the INAI would be deemed to be dissolved.
- In order to comply with the constitutional mandate, on February 25 of this year, the Executive Branch presented a Initiative to issue the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Subjects and the Federal Law on the Protection of Personal Data Held by Private Parties and to reform Section XV of Article 37 of the Organic Law of the Federal Public Administration (the "Initiative
- After following the applicable legislative process in the Congress of the Union, the Initiative was approved on March 20, 2025, and the three laws contained in the Initiative were published in the evening version of the DOF (Official Gazette of the Federal Republic of Argentina). Consequently, the INAI was officially dissolved, and the laws entered into force on March 21, 2025.
- The day after the publication of the three new laws, on March 21, 2025, also in the evening edition of the DOF, the Internal Regulations for Transparency for the People and the Internal Regulations of the Ministry of the Interior were published, as well as reforms, additions, and repeals of various provisions of the Internal Regulations of the Anti-Corruption and Good Government Secretariat.
- On December 20, 2024, it was published in the Official Gazette of the Federation (“DOF”) the initiative for constitutional reform in the area of organic simplification, which aimed to eliminate seven autonomous constitutional bodies, including the National Institute of Transparency, Access to Information and Protection of Personal Data ( "INAI,”), with the purpose, according to the explanatory statement of the initiative itself, of rationalizing the public resources that were destined for the operation and functioning of the autonomous constitutional bodies, in order to allow greater investment in social policies and programs.
- The transitional articles of the constitutional reform established that the Congress of the Union had a period of ninety calendar days from its entry into force to make the necessary adjustments to the corresponding laws in order to comply with its content. It also stipulated that, once the legislative changes came into force, the INAI would be deemed to be dissolved.
- In order to comply with the constitutional mandate, on February 25 of this year, the Executive Branch presented a Initiative to issue the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Subjects and the Federal Law on the Protection of Personal Data Held by Private Parties and to reform Section XV of Article 37 of the Organic Law of the Federal Public Administration (the "Initiative
- After following the applicable legislative process in the Congress of the Union, the Initiative was approved on March 20, 2025, and the three laws contained in the Initiative were published in the evening version of the DOF (Official Gazette of the Federal Republic of Argentina). Consequently, the INAI was officially dissolved, and the laws entered into force on March 21, 2025.
- The day after the publication of the three new laws, on March 21, 2025, also in the evening edition of the DOF, the Internal Regulations for Transparency for the People and the Internal Regulations of the Ministry of the Interior were published, as well as reforms, additions, and repeals of various provisions of the Internal Regulations of the Anti-Corruption and Good Government Secretariat.
- The regulations repealed by the Initiative and those issued to replace it are summarized below:
| REPEALED LEGISLATION | NEW LEGISLATION ISSUED |
| Federal Law on the Protection of Personal Data Held by Individuals, published in the DOF on July 5, 2010. General Law on Protection of Personal Data in Possession of Obligated Subjects, published in the DOF on January 26, 2017. General Law on Transparency and Access to Public Information, published in the DOF on May 4, 2015 and its subsequent modifications. Federal Law of Transparency and Access to Public Information, published in the DOF on May 9, 2016 and its subsequent modifications. Agreement approving the Annual Program for Verification and Institutional Support for compliance with obligations regarding access to information and transparency by federally obligated subjects, corresponding to the 2025 fiscal year., published in the DOF on January 21, 2025. | Federal Law on the Protection of Personal Data Held by Individuals, published in the DOF on March 20, 2025. General Law on Protection of Personal Data in Possession of Obligated Subjects, published in the DOF on March 20, 2025. General Law on Transparency and Access to Public Information, published in the DOF on March 20, 2025. Internal Regulations on Transparency for the People, published in the DOF on March 21, 2025. Internal Regulations of the Ministry of the Interior, published in the DOF on March 21, 2025. Reforms, additions and repeals of various provisions of the Internal Regulations of the Anti-Corruption and Good Government Secretariat, published in the DOF on March 21, 2025. |
GENERAL CONTENT
The three laws issued present specific modifications to the previously applicable legislation; however, one change was implemented in the text of all of them: the replacement of the powers conferred on the INAI with new authorities dependent on the federal executive branch that will assume those powers.
As for the two laws in personal data protection matters (Federal Law on the Protection of Personal Data Held by Private Parties and General Law on the Protection of Personal Data Held by Obligated Subjects) The authority that will replace the INAI is the Anti-Corruption and Good Government Secretariat. On the other hand, regarding the law in matters of transparency and access to public information (General Law on Transparency and Access to Public Information) The authority that will replace the INAI is the entity called Transparency for the People, which is a decentralized administrative body of the Anti-Corruption and Good Government Secretariat.
Similarly, the language of all three texts was modified, incorporating inclusive (neutral) language into their provisions. For example, "owner" was changed to "owner," "person in charge" to "person in charge," among others.
IMPORTANT CHANGES
Federal Law on the Protection of Personal Data Held by Individuals:
- The requirements for privacy notices are modified.
- It is mandatory to make a simplified privacy notice available to data subjects when personal data is obtained by any electronic, optical, audio, visual, or other technological means by the data controller/regulated subjects.
- Key terms are modified, including:
- Headline: person to whom the personal data correspond and no longer specifies that they must concern a natural person.
- Responsible and adaptable: was defined as the private individual or legal entity that decides on the processing of personal data; and is now defined as the Regulated Subjects referred to in Section XVI.
- In turn, said fraction XVI adds in terms of “Regulated Subjects” which are the private individuals or legal entities that carry out the processing of personal data.
- Notice of Privacy: It is no longer established that personal data must be made available to the owners prior to processing, but rather at the time when they are collected.
- Sensitive personal data: It was removed from the list of personal data sensitive to union membership, which was included in the previous definition.
- The request to exercise ARCO rights must also contain a description of the ARCO right being exercised, or the request made by the holder. Furthermore, to exercise the right to object, one of two conditions for eligibility established in the text of the new law, which were not previously included, must now be met.
- Previously, the INAI was required to submit an annual report on its activities to the Congress of the Union; now, the Secretariat for Anti-Corruption and Good Government is not required to do so.
- The possibility of filing a nullity suit before the Federal Court of Fiscal and Administrative Justice against resolutions issued by the INAI has been eliminated. Now, the only means of defense against the Secretariat's resolutions is an amparo suit, which must be brought before District Courts and Circuit Courts specializing in matters of access to public information and personal data protection.
General Law on Protection of Personal Data in Possession of Obligated Subjects
- Key terms are modified, including:
- Headline: subject to whom the personal data correspond and no longer specifies that they must concern a natural person.
- Notice of Privacy: It is no longer established that personal data must be made available to the owners prior to processing, but rather at the time when they are collected.
- Guarantor organizations: Previously, it referred to bodies with constitutional autonomy specialized in matters of access to information and protection of personal data. Now it is defined as Guarantor authorities, which are the oversight and discipline body of the Judiciary; the internal oversight bodies of the autonomous constitutional bodies; the internal comptroller's offices of the Congress of the Union; the National Electoral Institute, with regard to access to personal data protection by political parties; and the bodies responsible for internal oversight or their counterparts in the Executive, Legislative, and Judicial branches, as well as the autonomous constitutional bodies of the Federal Entities.
- The National System for Transparency, Access to Information, and Protection of Personal Data was eliminated from this law, as well as its respective chapter, including its obligation to design, implement, and evaluate a National Personal Data Protection Program that defines public policy to meet certain national objectives in this area.
- Previously, the holder had the right to file a review appeal or a non-compliance appeal before the INAI or the guarantor agencies; now, they may only file the review appeal before the Anti-Corruption and Good Governance Secretariat or the guarantor authorities.
General Law on Transparency and Access to Public Information:
- The new name of the National System for Transparency, Access to Information and Protection of Personal Data will be "National System for Access to Public Information," which will be headed by Transparency for the People. Its powers include issuing the rules for the operation and functioning of said system, as well as issuing agreements authorizing Transparency for the People to resolve appeals filed by individuals against resolutions issued by local guarantor authorities.
- It is noted that the National System will have Transparency Subsystems corresponding to each federal entity, which will have specific powers and whose Committees will be made up of a representative of the Legislative Branch, the Judicial Branch, each of the autonomous constitutional bodies, the municipalities of the federal entity or territorial demarcations of Mexico City, as appropriate, and the Executive Branch, who will preside over it.
- The new name of the Council of the National System of Transparency, Access to Information and Protection of Personal Data will be "Council of the National System of Access to Public Information", whose members will be the heads of the Agency for Digital Transformation and Telecommunications, the General Archive of the Nation, the Federal Center for Conciliation and Labor Registry, the Federal Court of Conciliation and Arbitration, and the National Electoral Institute, as well as the president of each Committee of the Transparency Subsystems and the head of the Anti-Corruption and Good Government Secretariat, who will preside over it.
- The principles of consistency, documentation, exceptionality and exhaustiveness were added to the guiding principles of the Guarantor Authorities, by virtue of which there must be concordance between the requests of individuals and the responses of the obliged subjects, who must provide access to the information they keep or are obliged to document, which may only be classified as reserved or confidential when it meets the assumptions expressly provided for by law, and the response must expressly refer to each of the points requested, with the limitations of the documentation principle.
- The powers of the guarantor authorities have been extended to impose sanctions, and the power to bring unconstitutionality actions against laws passed that violate the right of access to public information and the protection of personal data has been eliminated.
- Specifically, it is indicated that among the powers of Transparency for the People will be to hear and resolve appeals filed by individuals against resolutions issued by local guarantor authorities, provided they are linked to federal public funds.
TRANSITORY
- Modifications to the regulations and other applicable provisions: As previously noted, the Internal Regulations for Transparency for the People and the Internal Regulations of the Ministry of the Interior were published on March 21, 2025, as well as reforms, additions, and repeals of various provisions of the Internal Regulations of the Ministry of Anti-Corruption and Good Government. However, the Federal Executive Branch must also issue the corresponding adjustments to the other applicable regulations and provisions, including the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties, in order to harmonize their provisions with the changes made to the respective laws they regulate, within ninety calendar days following the entry into force of the Initiative.
- District Courts and Circuit Collegiate Courts specializing in matters of access to public information and protection of personal data: The Federal Judicial Branch must authorize them within a period of no more than 120 calendar days from the entry into force of the Initiative, to which the amparo proceedings in these matters that are pending will be forwarded for resolution. Likewise, the procedural deadlines and time limits for amparo proceedings in matters of access to public information and protection of personal data that are pending before District Courts and Circuit Collegiate Courts are suspended for a period of 180 calendar days from the entry into force of the Initiative.
- Council of the National System of Access to Public Information: It must be installed no later than sixty calendar days from the entry into force of the Initiative, following a call issued for this purpose by the Anti-Corruption and Good Government Secretariat.
- Procedures initiated before the INAI prior to the entry into force of the Initiative: Regarding access to public information, proceedings will be conducted before Transparency for the People in accordance with the applicable provisions in force at the time of their initiation. Regarding personal data or any other matter other than access to public information, proceedings will be conducted in accordance with the provisions in force at the time of their initiation before the Anti-Corruption and Good Government Secretariat.
- Legal defense before administrative, jurisdictional, and judicial authorities of administrative and legal acts issued by the INAI: Regarding access to public information, this will be carried out by Transparency for the People. Meanwhile, regarding personal data or any other matters other than access to public information, as well as the monitoring of those currently underway, including criminal and labor proceedings, this will be carried out by the Anti-Corruption and Good Government Secretariat.
We are available for any information related to the impact of these three laws on transparency, access to public information, and personal data protection.
PUBLICATION LINKS











