MexicoMexicoLawLey General de Proteccion de Datos Personales en Posesion de

Mexico General Law on Protection of Personal Data Held by Obligated Subjects (2025)

Replaces the 2017 general law governing personal data held by public authorities and other obligated subjects, following the dissolution of INAI.

In forceIntroducedCommitteeFloorLaw

Amended by decree published in the Diario Oficial de la Federacion (DOF 14-11-2025)Nov 14, 2025 12 months ago

Body: Congreso de la Union; Presidency of Mexico
Session: LXVI Legislature
In effect since: Mar 21, 20251 year ago
Topics: Privacy Data

Official page Source: Camara de Diputados, Leyes Federales Vigentes

Timeline

Nov 14, 2025 12 months ago
Amended by decree published in the Diario Oficial de la Federacion (DOF 14-11-2025)
Mar 21, 2025 1 year ago
Law enters into force
Mar 20, 2025 1 year ago
Issued by the same decree as the new private-sector data law and published in the Diario Oficial de la Federacion

MexicoLey Federal de Proteccion de Datos Personales en Posesion de

Mexico Federal Law on Protection of Personal Data Held by Private Parties (2025)

Replaces Mexico's 2010 private-sector data protection law and moves its oversight from the dissolved INAI to the Secretaria Anticorrupcion y Buen Gobierno.

In forceNov 14, 2025

MexicoDecree reforming the Constitution on organic simplification

Mexico constitutional reform on organic simplification (INAI and IFT dissolution)

Amends the Mexican Constitution to eliminate several autonomous bodies, including the transparency and data protection institute INAI and the Federal Telecommunications Institute (IFT), transferring their functions to government agencies.

In forceJul 16, 2025

DelawareHB 380

Delaware Personal Data Privacy Act Amendments

Amends the Delaware Personal Data Privacy Act to align it with other states' laws, including lowering the applicability threshold to entities processing data of at least 15,000 consumers.

EnactedOct 3

Californiaunverified

Wearable technology privacy bill

This bill would have regulated wearable technology devices to address privacy concerns.

VetoedSep 30

CaliforniaSB 923

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

EnactedSep 27

CaliforniaAB 883

Data Brokers: Deletion Mechanism: Elected Officials and Judges

Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.