What is an aviso de privacidad?

It is the mandatory privacy notice required under Mexican law. It must clearly tell data subjects what data is collected, the purposes, and how to exercise their rights, and it is a central compliance obligation.

Does Mexico require opt-in consent?

For ordinary data, consent can be tacit, meaning silence after a privacy notice can suffice. Express consent is required for financial data, and written consent for sensitive data.

America del Nord

Consenso ai cookie in México

Consenso e privacy in México

Mexico's private sector law is the Federal Law on the Protection of Personal Data Held by Private Parties, dating from 2010 and historically overseen by INAI. A distinctive feature is the privacy notice, the aviso de privacidad, which is a mandatory and detailed disclosure that must be provided to data subjects. Consent can be tacit for ordinary data, meaning silence after a notice can suffice, but express consent is required for financial and sensitive data, and written consent for sensitive data. This tacit consent model is softer than the EU approach. Note that Mexico has been restructuring its transparency bodies, so the supervising authority arrangements have been in transition.

Autorità

Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)

Stato

Federal Law on the Protection of Personal Data Held by Private Parties since 2010

Legge principale

LFPDPPP

Lingue

Español (Latinoamérica)

Chi deve conformarsi

The LFPDPPP applies to private individuals and legal entities that process personal data in the course of their activities, subject to the scope and exclusions established by Mexican law.

Sanzioni

Fines historically up to around 320,000 days of minimum wage for serious violations

Obblighi principali

Provide a privacy notice (Aviso de Privacidad) when collecting personal data
Clearly explain the purposes for which personal data will be processed
Obtain consent when required by the LFPDPPP
Obtain express and written consent for sensitive personal data
Obtain express consent for financial or property-related information, subject to applicable legal exceptions
Process personal data according to the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality and accountability
Implement appropriate administrative, technical and physical security measures
Maintain confidentiality of personal data
Respect ARCO rights — Access, Rectification, Cancellation and Opposition
Establish mechanisms through which individuals can exercise their privacy rights
Provide mechanisms for individuals to revoke consent
Manage transfers of personal data in accordance with applicable requirements
Maintain appropriate documentation and evidence of privacy compliance

Indicazioni locali

Publish a complete aviso de privacidad
Use express consent for financial and sensitive data
Provide notices in Spanish
Track the restructuring of Mexico's data protection authority

Come ti aiuta ConsentX

Privacy-notice-first consent experience to support Mexico's notice-driven privacy framework
Customisable consent banners for different processing purposes
Express consent capture for processing that requires stronger consent
Consent and preference receipts to maintain evidence of user choices
Prior-script blocking to help control selected non-essential tracking technologies
Region Rule Engine to configure Mexico-specific privacy experiences
ARCO request workflows to help organise privacy requests
Audit-ready records for consent and privacy interactions
Multi-jurisdictional compliance controls for organisations operating across Mexico and other markets

Inizia gratis

yoursite.com

México

Teniamo alla tua privacy

Ti chiediamo il consenso prima di qualsiasi cookie non essenziale, secondo le regole che si applicano nella tua regione.

Accetta tuttoRifiuta i non essenzialiGestisci preferenze

Consenso registrato

sha256 · chain ok

Questa pagina è stata tradotta automaticamente e può contenere errori. Fai verificare i dettagli legali a un legale locale qualificato prima di farvi affidamento.

Prepara México con ConsentX

Banner per regione, blocco preventivo degli script, DSAR e prove a prova di manomissione.

Inizia gratis Prenota una demo

Come conformarsi a México con ConsentX

1
Analizza il tuo sito
Esegui una scansione gratuita per trovare ogni cookie e tracker del tuo sito, così sai esattamente cosa richiede il consenso secondo México.
2
Mostra un banner adattato alla regione
Aggiungi il banner ConsentX. Rileva la regione di ogni visitatore e mostra automaticamente l esperienza di consenso richiesta da México.
3
Blocca i tracker fino al consenso
Mantieni bloccati i cookie e i tracker non essenziali finché la persona non acconsente, così nulla si attiva prima del consenso.
4
Registra prove a prova di manomissione
Ogni scelta viene conservata come ricevuta di consenso a prova di manomissione, da esibire in un audit México.
5
Gestisci le richieste nei tempi previsti
Usa il flusso DSAR integrato con timer SLA per rispondere alle richieste di accesso, cancellazione e opposizione entro il termine di legge.