Personal Digital Sovereignty In Mexico And The Biometric CURP

When a company collects biometric data in Mexico, one important question that is often asked is how Mexico’s evolving privacy framework treats that information, and what obligations or risks come with it. The concern is well founded, because biometric data is one of the most sensitive categories of personal information, and Mexico’s recent changes to implement the biometric CURP to citizens have only increased discussion around the topic.

This particular decision has been heavily criticized, especially when considering the evolving AI space and the increasing risk of deepfakes and other concerns. Even if the reason to implement the biometric CURP is well founded (it was proposed to support in missing persons cases), the specific worry here is that state surveillance may only increase because of this decision, especially in connection to the new requirement to link your telephone number with your CURP.