On December 21, 2011, Mexico issued the final version of its Regulations of the Federal Law for the Protection of Personal Data Held by Private Parties (Reglamento de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares). The regulations, which contain mostly minor changes to the prior draft that was released in October, will take effect on December 22, 2011. Notable updates in this final draft include:
- clarification of notice and consent requirements;
- changes to restrictions on cloud computing;
- updates to requirements regarding data transfers; and
- clarifications regarding data subjects’ rights.
Hi there,
The document published yesterday on the Mexican Official Gazette of the Federation (December 21, 2011) is the official one, not a final draft as such. The Regulations of the Federal Law for the Protection of Personal Data Held by Private Parties entered in force on December 22, 2011 although there are several provisions that are relevant, as for example a period of 18 months (since December 22, 2011) to adopt and implement security measures according to its articles 57 to 66 (Chapter III, on security measures and data breaches). Therefore, this is the official regulation already in force.
Best,
MR