Mexico — AI Law & Policy Updates

Decreto de 20 de marzo de 2025 — expide la Ley Federal de Protección de Datos Personales en Posesión de los Particulares, la Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados y la Ley General de Transparencia · Ley Federal de Telecomunicaciones y Radiodifusión (DOF 14 de julio de 2014) — Status: No AI-specific statute — and the enforcement authority CHANGED in 2025

Mexico has no artificial-intelligence act. What matters most for anyone reading this corpus is not the absence of an AI law but a change of authority that a stale source will get wrong. The decree published in the Diario Oficial de la Federación on 20 March 2025 issues three statutes at once — the Ley General de Transparencia y Acceso a la Información Pública, the Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados, and the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, which is the one that binds private-sector AI deployers — and, in the same instrument, amends article 37 fracción XV of the Ley Orgánica de la Administración Pública Federal. ⚠️ THAT AMENDMENT IS THE POINT: the INAI, the autonomous body most published guidance still names as Mexico's data-protection authority, was wound up, and these functions sit with the Secretaría Anticorrupción y Buen Gobierno. Any compliance step that routes a Mexican privacy matter to INAI is routing it to a body that no longer exists. Sector exposure for AI-driven communications and platform services additionally runs through the Ley Federal de Telecomunicaciones y Radiodifusión, published on 14 July 2014. ⚠️ Recorded limit: what is tracked here is read from the DOF's own daily edition index. www.diputados.gob.mx, the consolidated statute library, is unreachable from this pipeline, so this is a set of named, dated, verifiable instruments rather than an exhaustive inventory of Mexican law.