Nowadays in México, corporations tend to think that by
developing a privacy notice they are in compliance with the whole
framework of data privacy laws in México. This is both wrong
and delicate, since such considerations lead often to noncompliance
and possible penalties.
It is important to highlight that the privacy notice is simply
the result of a complex process within the organization.
One of the most important matters for companies in their role as
a data controller, regarding their use of personal information from
employees, clients, suppliers, prospects, etc., is strictly to
fulfill the principle of accountability. In view thereof, article
48 of the Regulation to the Federal Law on Protection of Personal
Data Held by Private Parties (hereafter referred to as "The
Regulation") dictates that data controllers must adopt
measures to guarantee the proper processing of personal data, which
shall comprise the following obligations:
