Legal Considerations Regarding Cybersecurity In Mexico: Processing Of Sensitive Personal Data

Cybersecurity attacks have been increasing recently and it is necessary that every corporation create as part of their internal regulations - besides of the obligations to comply with applicable laws - specific policies creating awareness for the protection of third parties with whom they collaborate.

Cybersecurity should not be considered as separate from data protection. Together, they provide the necessary tools to protect the personal data of third parties collaborating with each corporation and for such reason they should be considered as inseparable.

In Mexico, there are currently three organizations with jurisdiction over cybersecurity: (i) the Cyber Incident Response Center of the General Scientific Directorate of the National Guard (Centro de Respuesta a Incidentes Cibernéticos de la Dirección General Científica de la Guardia Nacional), (ii) the Federal Police (Policia Federal) and the (iii) National Institute for Transparency, Access to Information and