On September 28, 2018, a decree stating the Convention
for the Protection of Individuals with regard to Automatic
Processing of Personal Data (“Convention 108”)
and its Additional Protocol regarding Supervisory
Authorities and Transborder Data Flows enter into force on
October 1, 2018, was published in the Official Gazette. With this,
Convention 108 and its Protocol are binding for Mexico.
Convention 108 and its Protocol are intended to guarantee the
right to privacy of any individual in relation to the automated
processing of personal data. The principles and other provisions
contained in these instruments are applicable both to the
processing of personal data by public and private entities.