The data protection practice at Pérez-Llorca advises clients on the collection, use, storage and transfer of personal and sensitive personal data across digital platforms, financial services, healthtech and e-commerce operations. The team also designs and implements compliance frameworks, including privacy notices and cross-border transfer mechanisms, and regularly represents clients in regulatory investigations, sanctions proceedings and data subject disputes. Additionally, it provides incident response support and conducts privacy due diligence in the context of M&A transactions. Practice head Patricio Martínez, who was promoted to the partnership in January 2026, specialises in privacy governance frameworks, data mapping strategies, and cross-border data transfers, along with data protection impact assessments, data processing agreements and incident response.
Legal 500 Editorial commentary

Key clients

  • Federación Mexicana de Fútbol Asociación
  • Medsi.AI
  • Accor Hotels
  • Shopfully
  • Box
  • NCS
  • Activate Games
  • ON
  • Draftea
  • Geely
  • Ares Management
  • HIR Casa

Work highlights

Acted as data protection counsel for AI-powered medical diagnostics platform Medsi.AI.
Advises Accor Hotels on data protection matters arising from its franchise and management operations in Mexico.
Advised US-listed cloud content platform, Box, on adapting its core subscription documentation for the Mexican market.
Practice head

Patricio Martínez