ARTICLE · 27 MARCH 2015

IFAI Investigates Liverpool Hack

Jones Day

Contributor

Jones Day

Jones Day

Jones Day is a global law firm with more than 2,400 lawyers in 40 offices across five continents....

View firm profile

Explore more from Jones Day

On January 15, 2015, the IFAI announced a preliminary investigation into the vulnerabilities of a database of personal information belonging to credit card retailer Liverpool

MexicoPrivacy

Jonathon Little

Undine Von Diemar

Richard Johnson

Author LinkedIn connections

On January 15, 2015, the IFAI announced (source document in Spanish) a preliminary investigation into the vulnerabilities of a database of personal information belonging to credit card retailer Liverpool. On December 24, 2014, Liverpool, the third largest issuer of credit cards in Mexico, publicly disclosed (source document in Spanish) that cybercriminals accessed the company's personnel email accounts and clients' personal information.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

RDP In México Today

The Importance Of Consent: The Fine Imposed On The FMF And The Processing Of Biometric Data

Vázquez Tercero & Zepeda

Personal Digital Sovereignty In Mexico And The Biometric CURP

Vázquez Tercero & Zepeda

New Laws On Transparency And Protection Of Personal Data In Mexico

Von Wobeser y Sierra, SC

Data Protection 2025 – México

Legal Intelligence Newsletters

Read more about

Privacy
- Privacy Protection
- Data Protection

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

PrivacyJones Day

New Data Protection Law Comes Into Effect In Mexico

On 21 March 2025, the New Federal Law for the Protection of Personal Data in Possession of Private Parties came into effect, superseding and repealing the prior data protection law.

New Laws On Transparency And Protection Of Personal Data In Mexico

On 20 March 2025, the Decree issuing laws on transparency and protection of personal data was published in the Federal Official Gazette, which became effective the day after its publication.

Von Wobeser y Sierra, SC

Data Protection 2025 – México

The legal framework for data protection is found in Articles 6 and 16 of the Mexican Constitution, as well as in the new Federal Law for the Protection of Personal Data Held by Private Parties, published on March 20, 2025...

Data Protection Laws And Regulations Mexico 2024

The legal framework for data protection is found in Articles 6 and 16 of the Mexican Constitution, as well as in the Federal Law for the Protection of Personal Data Held...

Personal Digital Sovereignty In Mexico And The Biometric CURP

When a company collects biometric data in Mexico, one important question that is often asked is how Mexico’s evolving privacy framework treats that information, and what obligations or risks come with it. The concern is well founded, because biometric data is one of the most sensitive categories of personal information, and Mexico’s recent changes to implement the biometric CURP to citizens have only increased discussion around the topic.

Vázquez Tercero & Zepeda

Privacy Law Survey 2021 - Mexico / Mexico City

As concerns about worker data privacy have grown across Latin America, so has the definition of "worker"; past, current, and potential employees and contractors may now be covered by a country's labor, employment and data-security regulations.

Mexico's Data Protection Legal Framework. It's Real And It's Serious.

Almost 8 years years ago, the Mexican Federal Law on the Protection of Personal Data held by Private Parties (the Federal Law on Data Protection) was enacted. Almost 8 years ago, things started to change in Mexico.

New Mexican General Data Protection Law Moves Forward In Senate

The right to the protection of personal data will be limited only for reasons of national security, public order provisions, public health and safety, or to protect third-party rights.

Processing Of Personal Data: Is Your Privacy Notice Up To Date?

Many companies in Mexico, particularly those with a large online presence, such as e-commerce businesses, digital marketing agencies, and social media firms, collect personal data from clients...

Vázquez Tercero & Zepeda

Mexico Enacts New Data Protection General Law

On January 26, 2017, the new General Law for the Protection of Personal Data held by Regulated Subjects (source document in Spanish) was published in the Federal Official Gazette...

European Commission Publishes Final Code Of Practice On Marking And Labelling AI-Generated Content

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

European UnionTechnology

Ninth Circuit Vacates CFAA Injunction Against Perplexity's Comet AI Agent

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

United StatesMedia, Telecoms, IT, Entertainment

Commission Proposes EU Public Procurement Act

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.

European UnionGovernment, Public Sector

EU Commission Pushes for Transposition of the EmpCo Directive on Environmental Claims

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

European UnionConsumer Protection

Federal Court Holds New York’s Climate Superfund Law Preempted By CAA

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

United StatesEnvironment

Amendment To The General Rules Under Mexico’s Anti-Money Laundering Law (LFPIORPI): Key Regulatory Changes Under Acuerdo 115/2026

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

MexicoGovernment, Public Sector

New EU Guidelines On Abuse Of Dominance: Recalibrated Framework, With Ample Room For Aggressive Enforcement

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

European UnionAntitrust/Competition Law

Product Liability Law In Spain

The user of defective goods benefi ts from several causes of action against the vendor or manufacturer.

SpainConsumer Protection

Consumer Reporting Agency Agrees To $22 Million Settlement Of Data Breach Class Action

On December 3, a federal court in the Central District of California granted plaintiffs' request for preliminary approval of a proposed $22 million settlement ...

United StatesPrivacy

Proposed Nondiscrimination Rule For Private School Admissions, Financial Assistance, And Other Programs

The IRS has proposed new regulations that would impose nondiscrimination requirements on private schools seeking to maintain their tax-exempt status under section 501(c)(3). These regulations would prohibit policies discriminating on the basis of race, color, or national or ethnic origin in admissions, financial assistance, and other school programs. The proposed rules raise important questions about how private schools can structure their programs while complying with federal tax law requirements.

United StatesTax