New Law Has Strict Requirements, Tough Penalties
PRIVACY LAW—MEXICOJuly 20, 2010
Mexico's new Federal Law for Protection of Personal Data Held by Private Persons (LFPDP) focuses on "controlled and informed" processing of personal data and ensuring Mexican citizens' "privacy and right to self-determination." In their analysis of the new law, Fernando de Ovando and Mauricio F. Paez of Jones Day detail the rights of data subjects under the LFPDP as well as the strict requirements for companies that process the personal data of Mexican citizens. To avoid severe penalties enacted under the law--including fines of up to $1.4 million and prison sentences of up to five years that can be doubled in certain cases--de Ovando and Paez advise companies to "draft comprehensive privacy policies, procedures and guidelines" to satisfy Mexico's new legal requirements. (Registration may be required to access this story.) Editor's Note: The IAPP will host a Web conference on the new law next Thursday, July 29, at 1 p.m. EDT.