On October 20, 2011, Mexico’s Ministry of Economy made public an update to its proposed Regulations to the Federal Law for the Protection of Personal Data Held by Private Parties. The new draft regulations, which contain changes made in light of public comments on the prior version, will take effect if they receive final executive approval, which may happen later this year. The updates to the draft regulations include:
- Rules specific to cloud computing
- Clarification of notice requirements
- Clarification of consent requirements
- Exemptions for certain business contact information
- Revisions to data transfer restrictions
- Updated security and breach notification provisions
- Revised requirements for self-regulatory schemes
- Revisions to provisions governing the exercise of data subjects’ rights