AI Regulation ReferenceDoes Federal Law on the Protection of Personal Data (LFPDPPP) — 2025 AI Provisions require Transparency & Disclosure?
Mexico • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 4 specific requirements for Transparency & Disclosure across 1 provision:
- Privacy notice disclosure — Controllers must disclose the use of AI, ADM systems, or algorithms for decisions affecting individuals
- Algorithmic logic — Privacy notices must explain the algorithmic logic used in automated processing
- Significance and consequences — Must inform data subjects of the significance and potential consequences of automated processing
- Informed consent — Mandatory informed consent required for automated processing affecting individuals
Algorithmic Transparency and Disclosure #
Mexico's revised data protection law requires controllers to disclose in privacy notices the use of AI, automated decision-making systems, or algorithms — including the algorithmic logic, significance of processing, and potential consequences. This catches any AI system processing personal data of Mexican residents, even if the deployer is not Mexico-based.
Requirements
| Requirement | Details |
|---|---|
| Privacy notice disclosure | Controllers must disclose the use of AI, ADM systems, or algorithms for decisions affecting individuals |
| Algorithmic logic | Privacy notices must explain the algorithmic logic used in automated processing |
| Significance and consequences | Must inform data subjects of the significance and potential consequences of automated processing |
| Informed consent | Mandatory informed consent required for automated processing affecting individuals |
Penalties
| Violation | Fine |
|---|---|
| Administrative violations | 100–320,000 UMA (~$1,200–$3.9M USD) |
| Aggravating factors | Higher fines for repeat offenses, sensitive data, large-scale processing |