What Is Ley Federal de Protección de Datos Personales en Posesión de los Particulares (new, 20 March 2025)?

The current Orden Jurídico text is marked TEXTO VIGENTE and identifies the new Federal Law on Protection of Personal Data Held by Private Parties as published 20 March 2025. The current Chamber of Deputies PDF identifies the same text and a 14 November 2025 last reform; the official decree confirms Article 4 was amended to reference the Código Nacional de Procedimientos Civiles y Familiares and the Ley Federal de Procedimiento Administrativo as supplemental procedural law. The current text does not support an exception-free or consent-free scope statement: Article 1 contains credit-information and qualifying personal/household exclusions, while Articles 7 and 9 establish consent subject to listed exceptions. Articles 21 through 26 provide access, rectification, cancellation, and opposition rights with statutory limitations, not a universal erasure guarantee. Article 31 states a maximum 20-business-day determination period and, if the request is procedent, 15 business days to make it effective, with one equal justified extension available — statutory ARCO process periods, not a provider SLA, deletion guarantee, or favorable-outcome promise. The current law assigns the federal private-party protection procedure to the Secretaría Anticorrupción y Buen Gobierno, with 2025 transition materials addressing former INAI functions and proceedings. A direct fetch of the Secretariat's 21 March transition release returned an access error during the 7 September 2026 review, so it is treated only as transition context alongside the controlling law and decree.

Written byRahul Kandoriya·Founder, OfflistMe·Last updated September 7, 2026