Flag of Mexico

Mexico

Fully legal

E-Signature Legality in Mexico

E-Signature Legality in Mexico

Mexico recognizes electronic signatures under the Código de Comercio. Simple and Advanced signatures cover nearly all commercial B2B contracts, with notarial acts, wills, and civil-status filings reserved for wet ink and a notary.

Mexico recognizes electronic signatures under the Código de Comercio. Simple and Advanced signatures cover nearly all commercial B2B contracts, with notarial acts, wills, and civil-status filings reserved for wet ink and a notary.

Overview

Intro & Key Facts

Quick Summary

Mexico's Código de Comercio and Ley de Firma Electrónica Avanzada make electronic signatures valid and enforceable for commercial contracts, using a two-tier system: Firma Electrónica Simple for ordinary agreements and Firma Electrónica Avanzada for cases needing a stronger statutory presumption. Foreign e-signature providers operate without restriction for standard B2B use. Wills, real estate transfers, civil-status filings, and notarial acts still require a notary and a wet-ink signature.

Mexico's Código de Comercio and Ley de Firma Electrónica Avanzada make electronic signatures valid and enforceable for commercial contracts, using a two-tier system: Firma Electrónica Simple for ordinary agreements and Firma Electrónica Avanzada for cases needing a stronger statutory presumption. Foreign e-signature providers operate without restriction for standard B2B use. Wills, real estate transfers, civil-status filings, and notarial acts still require a notary and a wet-ink signature.

Practical Usage

Document Types in Mexico

Document Types in Mexico

Permitted Document Types

  • Commercial contracts

  • NDAs

  • Employment agreements

  • Vendor and service agreements

  • Purchase orders and invoices

  • SaaS and software licenses

  • Leases (as ordinary private contracts)

  • Corporate resolutions and other business-entity actions

Restricted Document Types

  • Wills and succession instruments

  • Real estate transfer and mortgage deeds

  • Marriage, divorce, adoption, and other civil-status acts

  • Notarial acts generally

  • Digital promissory notes (pagarés), per a contested October 2025 circuit court thesis

Common Exclusions

Wills and succession, real estate transfer and mortgage deeds, marriage, divorce, adoption and other civil-status acts, and notarial deeds generally all require a notary regardless of which signature type is used. A 2025 circuit court thesis separately requires an Advanced signature specifically for digital promissory notes.

Wills and succession, real estate transfer and mortgage deeds, marriage, divorce, adoption and other civil-status acts, and notarial deeds generally all require a notary regardless of which signature type is used. A 2025 circuit court thesis separately requires an Advanced signature specifically for digital promissory notes.

Authentication Required

  • Simple: No specific authentication method required by statute. Reliability is argued case by case.

  • Advanced: Must meet the four-part test in Código de Comercio Article 97: creation data exclusive to the signer, under the signer's sole control at signing, and tamper-evident as to both the signature and the message.

Restrictions

Signing Workflow Controls

Generally Permitted

  • Time-limited signature windows.

  • Sequential signing order.

  • Mandatory field completion.

  • Document expiration dates.

  • IP-based access restrictions.

  • Password-protected envelope access.

  • SMS verification codes.

  • Attachment requirements.

May Require Special Handling or Exclusions

  • Restrictions that prevent signers from reviewing the complete document before signing.

  • Restrictions that obscure material terms.

  • Blanket prohibitions on retaining personal copies.

  • Requirements for specific hardware or paid software to complete signing.

Legal Requirements

Mexico E-Signature Law Explained

Legal Frameworks

Código de Comercio (Art. 89-114 bis) + Ley de Firma Electrónica Avanzada (2012)

Código de Comercio (Art. 89-114 bis) + Ley de Firma Electrónica Avanzada (2012)

Regulatory Bodies

Secretaría de Economía accredits Prestadores de Servicios de Certificación, the certificate providers used for Advanced signatures. Servicio de Administración Tributaria (SAT) issues e.firma and acts as a joint certifying authority under the Ley de Firma Electrónica Avanzada. Secretaría Anticorrupción y Buen Gobierno (SABG) now handles data protection oversight, a role the dissolved INAI held until May 2025.

Secretaría de Economía accredits Prestadores de Servicios de Certificación, the certificate providers used for Advanced signatures. Servicio de Administración Tributaria (SAT) issues e.firma and acts as a joint certifying authority under the Ley de Firma Electrónica Avanzada. Secretaría Anticorrupción y Buen Gobierno (SABG) now handles data protection oversight, a role the dissolved INAI held until May 2025.

Minimum Retention

  • Commercial documents and data messages: 10 years minimum (Código de Comercio Art. 49)

  • Tax records: 5 years under the general rule in the Código Fiscal de la Federación

  • Employment records: retain termination documentation for several years post-termination as a standard risk-covering practice

Retention Notes

Mexican courts weigh the completeness of the audit trail (signer identification, IP logs, timestamps, authentication steps) when a Simple or Advanced signature is challenged. Keep the signed document, any certificate used, and the full audit trail together.

Mexican courts weigh the completeness of the audit trail (signer identification, IP logs, timestamps, authentication steps) when a Simple or Advanced signature is challenged. Keep the signed document, any certificate used, and the full audit trail together.

Data, Privacy & Cross-Border

Data Privacy and Compliance Mexico

Privacy Frameworks

LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, rewritten March 2025)

Privacy Compliance Status

Firma.dev is GDPR-aligned and EU-hosted. LFPDPPP hasn't been independently assessed against Firma.dev's processing, and Mexico has no EU adequacy decision, so cross-border transfers rely on the privacy notice and confidentiality commitment the LFPDPPP requires rather than a pre-cleared mechanism. Flag for a formal LFPDPPP gap check before making any compliance claim specific to Mexico.

Privacy Notes

Collect only the data needed for signature validity: name, email, signature record, IP address, and timestamps. Give signers a privacy notice describing how their data is processed. Get express consent for sensitive data, financial data, or any cross-border transfer specifically. Oversight moved from the dissolved INAI to the Secretaría Anticorrupción y Buen Gobierno in May 2025.

Data Residency

No

No

Adequacy Decision

No adequacy decision exists between the EU and Mexico. Transfers rely on the LFPDPPP's own notice-and-consent mechanism rather than an EU adequacy finding.

Cross-Border Transfers

Allowed on the basis of a privacy notice to the recipient and the recipient's commitment to matching confidentiality and security standards. Express consent is separately required for sensitive data, financial data, and cross-border transfers specifically. Mexico has no EU adequacy decision, and the LFPDPPP doesn't yet define a formal mechanism comparable to the EU's Standard Contractual Clauses for judging a destination country's protections.

Residency Notes

No general in-country data residency mandate found in the LFPDPPP for standard commercial data (not independently verified against a primary government source). Firma.dev's AWS Paris (eu-west-3) hosting has no confirmed blocker for ordinary B2B contracts.

Maximum Retention

No statutory maximum located. LFPDPPP's purpose-limitation principle calls for deleting data once its purpose is fulfilled, subject to tax, labor, and litigation retention exceptions.

Industry Compatibility

E-Signatures by Industry in Mexico

Fully Supported Industries

General Commercial

SaaS Software

HR Tech Employment

Education/Edtech

Construction

Supported with Agreement

Healthcare

Life Sciences/Pharma

Insurance

Financial Services/Fintech

Legal Tech

Real Estate Tech

Should Consult Counsel

Government

Industry Matrix Notes

Most B2B commercial, SaaS, HR, education, and construction use cases work cleanly with a Simple or Advanced signature. Healthcare, financial services, insurance, real estate, legal, and life sciences work fine for standard commercial documents but carry sector-specific carve-outs (property transfer deeds, digital promissory notes, institutional health records) where a notary or an accredited certificate applies instead. Government contracts and SAT filings require an accredited certificate and sit outside current scope.

General Commercial

Standard B2B contracts, vendor agreements, NDAs, purchase orders, and service agreements are fully valid with a Simple or Advanced signature under the Código de Comercio's functional equivalence principle. No government certificate or notarial step is needed for ordinary commercial dealings.

SaaS Software

Software licenses, subscription agreements, API terms of service, and MSAs all work with Firma.dev's standard signing flow. Mexico's technology-neutral approach to signatures means there's no domestic certificate requirement standing between a SaaS company and a signed contract.

Healthcare

Administrative agreements and vendor contracts work with a Simple or Advanced signature. Clinical and patient-record requirements sit under separate health-data rules, and sensitive health data carries heightened obligations under the LFPDPPP, so confirm sector-specific requirements before building patient-facing workflows.

Life Sciences/Pharma

Clinical trial agreements, CRO contracts, and research collaborations work with a Simple or Advanced signature for the commercial paperwork. Regulatory submissions to health authorities may carry their own certification requirements outside general contract law.

Insurance

Standard policy documents and endorsements work with a Simple or Advanced signature. No qualified-certificate requirement was found for ordinary insurance contracts, though regulated products may carry sector-specific disclosure rules worth confirming before scaling.

Financial Services/Fintech

Ordinary lending, servicing, and vendor agreements work with a Simple or Advanced signature. Watch the October 2025 circuit court thesis requiring an Advanced signature specifically for digital promissory notes. It doesn't affect standard loan agreements or terms of service, but it matters if your product issues pagarés as negotiable instruments.

HR Tech Employment

Employment contracts, offer letters, and HR policy acknowledgments are valid with a Simple or Advanced signature. Federal labor law imposes no special signature form for standard employment documentation. Keep the full audit trail alongside the signed contract in case of a labor dispute.

Legal Tech

Client engagement letters and firm-side agreements work with a Simple or Advanced signature. Court filings and certain judicial acts have their own procedural rules that typically call for SAT's e.firma or a similar accredited certificate, separate from general contract signing.

Real Estate Tech

Leases and property management agreements work as ordinary private contracts under Simple or Advanced signatures. Transferring ownership of real property must go through a notarial public deed and registration with the Public Registry of Property, which sits outside e-signature scope entirely.

Education/Edtech

Enrollment agreements and administrative contracts work with a Simple or Advanced signature. Official credentials issued by public educational institutions may require an institutional digital certificate, separate from ordinary e-signature use.

Construction

Construction contracts, subcontractor agreements, and change orders work with a Simple or Advanced signature under general commercial law. No construction-specific signature rule was found beyond that.

Government

Interactions with government agencies, including SAT filings, typically require the agency's own accredited certificate, usually SAT's e.firma. This sits outside Firma.dev's current scope of Simple and Advanced signatures for private commercial contracts.

How we works

How Firma.dev Works in Mexico

Firma.dev Supports

Firma.dev supports Simple and Advanced Electronic Signature workflows, covering the vast majority of B2B commercial use cases in Mexico.

Firma.dev supports Simple and Advanced Electronic Signature workflows, covering the vast majority of B2B commercial use cases in Mexico. The platform provides:

  • Signer identification: Email-based authentication with optional SMS verification

  • Tamper-evident documents: Cryptographic sealing ensures any modification after signing is detectable

  • Complete audit trails: Every action is timestamped and logged

  • EU data residency: All data hosted in AWS Paris

For B2B software agreements, SaaS subscriptions, employment contracts, NDAs, and vendor agreements, Firma.dev's signature level meets the Article 97 test for an Advanced Electronic Signature in Mexico.

// Create an envelope for a Mexican commercial contract
const envelope = await firma.envelopes.create({
  title: 'Contrato de Servicio',
  documents: [{ file: contractPdf }],
  signers: [{
    email: 'cliente@example.mx',
    name: 'Juan Pérez',
    locale: 'es' // Spanish language signing experience
  }],
  metadata: {
    contract_type: 'service_agreement',
    jurisdiction: 'MX'
  }
});
// Create an envelope for a Mexican commercial contract
const envelope = await firma.envelopes.create({
  title: 'Contrato de Servicio',
  documents: [{ file: contractPdf }],
  signers: [{
    email: 'cliente@example.mx',
    name: 'Juan Pérez',
    locale: 'es' // Spanish language signing experience
  }],
  metadata: {
    contract_type: 'service_agreement',
    jurisdiction: 'MX'
  }
});
// Create an envelope for a Mexican commercial contract
const envelope = await firma.envelopes.create({
  title: 'Contrato de Servicio',
  documents: [{ file: contractPdf }],
  signers: [{
    email: 'cliente@example.mx',
    name: 'Juan Pérez',
    locale: 'es' // Spanish language signing experience
  }],
  metadata: {
    contract_type: 'service_agreement',
    jurisdiction: 'MX'
  }
});

Firma.dev's API-first design means you can embed signing directly into your application. Companies operating in Mexico using Customer Workspaces get isolated environments for each customer, with templates and envelope usage tracked separately.

Legal Details

Implementing E-Signatures in Mexico

Implementing E-Signatures in Mexico

Mexico's e-signature framework rests on two pillars: the Código de Comercio and the Ley de Firma Electrónica Avanzada.

The Código de Comercio, reformed in 2000, 2003, and 2009, added Articles 89 through 114 bis to establish functional equivalence between electronic and paper documents, and between electronic and handwritten signatures. Article 89 sets the baseline: parties can use whatever technology they agree to, and courts can't deny legal effect to a document just because it's electronic.

Signature Types Recognized

Firma Electrónica Simple: Any electronic data that identifies the signer and shows their approval. Valid for most commercial contracts, with reliability argued case by case if challenged.

Firma Electrónica Avanzada (or Fiable): Meets the four-part test in Código de Comercio Article 97: the signature's creation data belongs exclusively to the signer, that data was under the signer's sole control at the moment of signing, and any later change to either the signature or the underlying message can be detected. Meeting this test gives the signature a statutory presumption of authenticity a Firma Electrónica Simple doesn't automatically carry.

This is a genuinely two-tier system, and it doesn't map onto the EU's SES, AES, and QES structure. Mexico has no third category above Advanced with its own separate legal presumption. The Ley de Firma Electrónica Avanzada, enacted in 2012, doesn't create a new signature level. It sets out how government agencies and SAT, Mexico's tax authority, implement the Advanced tier for their own purposes, most visibly through SAT's own e.firma. Private certification providers, called Prestadores de Servicios de Certificación, are accredited by the Secretaría de Economía and issue certificates that private parties can use to meet the Advanced test. That accreditation gives a signer one accepted route to Advanced status. It does not add a separate legal tier above it.

A 2023 reform to the General Law of Business Entities extended electronic signatures to corporate actions like shareholder resolutions, and the 2023 National Code of Civil and Family Procedure admits electronically signed documents as evidence on the same footing as paper. Together with the Código de Comercio's functional equivalence rule, this covers the large majority of commercial paperwork a SaaS company, agency, or internal team is likely to need signed.

The clearest recent wrinkle is a thesis published October 24, 2025 by Mexico City's Second Collegiate Circuit Court in Civil Matters, addressing what signature level a digital promissory note (pagaré) needs to function as an executable credit instrument. The court concluded that only an Advanced Electronic Signature satisfies that standard, leaning on NOM-151, the technical standard for preserving data messages, to justify the requirement. Commentators have pushed back on this reasoning: NOM-151 governs document preservation and time stamping, not signature attribution, and the ruling effectively reads a certification requirement into a law that never imposed one for private contracts generally. It's a circuit-level thesis. The Supreme Court hasn't ruled on the question, and it's worth tracking closely if your product issues or handles pagarés specifically.

For most SaaS companies, agencies, and internal teams operating in Mexico, a Firma Electrónica Simple or Advanced signature covers commercial contracts, employment agreements, NDAs, and software licenses without needing a notary, an accredited certificate, or SAT's own e.firma. Those requirements apply to a specific, named list of exceptions: wills, property transfers, civil-status filings, notarial acts, and now, per the contested 2025 thesis, digital promissory notes.

Recent developments

E-Signature Landscape in Mexico: 2026

New LFPDPPP (March 20, 2025): Replaced the 2010 data protection law and overhauled consent, controller obligations, and enforcement.

INAI dissolution (May 9, 2025): Mexico's prior data-protection and transparency regulator was dissolved under a November 2024 constitutional reform, with its functions transferred to the Secretaría Anticorrupción y Buen Gobierno.

2023 reforms: The General Law of Business Entities extended electronic signatures to corporate actions, and the National Code of Civil and Family Procedure admits e-signed documents as evidence on the same footing as handwritten signatures.

Digital promissory note thesis (October 24, 2025): Mexico City's Second Collegiate Circuit Court in Civil Matters held that digital promissory notes require an Advanced Electronic Signature specifically, a contested, not-yet-binding stance criticized for reading a certification requirement into a law that never explicitly imposed one.

FAQ

Frequently asked questions

For any unanswered questions, reach out to our support team via email. We'll respond as soon as possible to assist you.

Are electronic signatures legal in Mexico?

Yes. The Código de Comercio (Articles 89-114 bis) and the Ley de Firma Electrónica Avanzada give electronic signatures the same legal footing as handwritten ones for commercial contracts. Mexican courts routinely uphold e-signed agreements that reliably identify the signer and preserve document integrity.

What types of electronic signatures does Mexico recognize?

Mexican commercial law recognizes two tiers: Firma Electrónica Simple, any electronic data that identifies the signer and shows approval, and Firma Electrónica Avanzada (or Fiable), which meets the four-part test in Código de Comercio Article 97 and carries a statutory presumption of authenticity. There's no separate qualified tier layered on top of Advanced the way some other jurisdictions structure it.

What documents can't be signed electronically in Mexico?

Wills, real estate transfer and mortgage deeds, marriage, divorce, adoption and other civil-status acts, and notarial acts generally all require a notary and a wet-ink signature. A 2025 circuit court thesis also holds that digital promissory notes need an Advanced Electronic Signature specifically, though that ruling is contested and not yet binding nationwide.

Does Mexico require a government-certified signature like SAT's e.firma?

Only for specific uses. SAT's e.firma is the tax authority's own implementation of the Advanced tier, required for filings with SAT itself. For ordinary commercial contracts between private parties, a Simple or Advanced signature from any provider that meets Article 97's test is sufficient. No Mexican law requires a domestically accredited certificate for standard B2B agreements.

Can foreign e-signature providers operate in Mexico?

Yes. Mexican commercial law doesn't require signature providers to be domestically licensed for private contracts. Accreditation by the Secretaría de Economía only matters for a specific regulated use case needing a certificate from a Mexican Prestador de Servicios de Certificación. General commercial agreements don't need it.

What data protection rules apply to e-signatures in Mexico?

The LFPDPPP, fully rewritten in March 2025, governs personal data processing with consent and controller obligations. Oversight moved from the now-dissolved INAI to the Secretaría Anticorrupción y Buen Gobierno in May 2025. For e-signature purposes, this means collecting only the data needed to prove signer identity and document integrity, and giving signers a clear privacy notice.

How does Mexico handle cross-border data transfers?

The LFPDPPP allows transfers abroad when the recipient gets a privacy notice and commits to equivalent confidentiality and security standards, with express consent required for sensitive data, financial data, and cross-border transfers specifically. Mexico has no adequacy decision with the EU, and the law doesn't yet define a formal mechanism like the EU's Standard Contractual Clauses for judging a destination country's protections.

What changed with Mexico's 2025 data protection reform?

Mexico replaced its 2010 data protection law with a new LFPDPPP in March 2025, tightening consent and enforcement rules. Around the same time, the National Institute for Transparency and Access to Information (INAI) was dissolved as part of a broader government restructuring, with its data protection duties absorbed by the Secretaría Anticorrupción y Buen Gobierno, a shift some legal commentators worry weakens the regulator's independence.

FAQ

Frequently asked questions

For any unanswered questions, reach out to our support team via email. We'll respond as soon as possible to assist you.

Are electronic signatures legal in Mexico?

Yes. The Código de Comercio (Articles 89-114 bis) and the Ley de Firma Electrónica Avanzada give electronic signatures the same legal footing as handwritten ones for commercial contracts. Mexican courts routinely uphold e-signed agreements that reliably identify the signer and preserve document integrity.

What types of electronic signatures does Mexico recognize?

Mexican commercial law recognizes two tiers: Firma Electrónica Simple, any electronic data that identifies the signer and shows approval, and Firma Electrónica Avanzada (or Fiable), which meets the four-part test in Código de Comercio Article 97 and carries a statutory presumption of authenticity. There's no separate qualified tier layered on top of Advanced the way some other jurisdictions structure it.

What documents can't be signed electronically in Mexico?

Wills, real estate transfer and mortgage deeds, marriage, divorce, adoption and other civil-status acts, and notarial acts generally all require a notary and a wet-ink signature. A 2025 circuit court thesis also holds that digital promissory notes need an Advanced Electronic Signature specifically, though that ruling is contested and not yet binding nationwide.

Does Mexico require a government-certified signature like SAT's e.firma?

Only for specific uses. SAT's e.firma is the tax authority's own implementation of the Advanced tier, required for filings with SAT itself. For ordinary commercial contracts between private parties, a Simple or Advanced signature from any provider that meets Article 97's test is sufficient. No Mexican law requires a domestically accredited certificate for standard B2B agreements.

Can foreign e-signature providers operate in Mexico?

Yes. Mexican commercial law doesn't require signature providers to be domestically licensed for private contracts. Accreditation by the Secretaría de Economía only matters for a specific regulated use case needing a certificate from a Mexican Prestador de Servicios de Certificación. General commercial agreements don't need it.

What data protection rules apply to e-signatures in Mexico?

The LFPDPPP, fully rewritten in March 2025, governs personal data processing with consent and controller obligations. Oversight moved from the now-dissolved INAI to the Secretaría Anticorrupción y Buen Gobierno in May 2025. For e-signature purposes, this means collecting only the data needed to prove signer identity and document integrity, and giving signers a clear privacy notice.

How does Mexico handle cross-border data transfers?

The LFPDPPP allows transfers abroad when the recipient gets a privacy notice and commits to equivalent confidentiality and security standards, with express consent required for sensitive data, financial data, and cross-border transfers specifically. Mexico has no adequacy decision with the EU, and the law doesn't yet define a formal mechanism like the EU's Standard Contractual Clauses for judging a destination country's protections.

What changed with Mexico's 2025 data protection reform?

Mexico replaced its 2010 data protection law with a new LFPDPPP in March 2025, tightening consent and enforcement rules. Around the same time, the National Institute for Transparency and Access to Information (INAI) was dissolved as part of a broader government restructuring, with its data protection duties absorbed by the Secretaría Anticorrupción y Buen Gobierno, a shift some legal commentators worry weakens the regulator's independence.

FAQ

Frequently asked questions

For any unanswered questions, reach out to our support team via email. We'll respond as soon as possible to assist you.

Are electronic signatures legal in Mexico?

Yes. The Código de Comercio (Articles 89-114 bis) and the Ley de Firma Electrónica Avanzada give electronic signatures the same legal footing as handwritten ones for commercial contracts. Mexican courts routinely uphold e-signed agreements that reliably identify the signer and preserve document integrity.

What types of electronic signatures does Mexico recognize?

Mexican commercial law recognizes two tiers: Firma Electrónica Simple, any electronic data that identifies the signer and shows approval, and Firma Electrónica Avanzada (or Fiable), which meets the four-part test in Código de Comercio Article 97 and carries a statutory presumption of authenticity. There's no separate qualified tier layered on top of Advanced the way some other jurisdictions structure it.

What documents can't be signed electronically in Mexico?

Wills, real estate transfer and mortgage deeds, marriage, divorce, adoption and other civil-status acts, and notarial acts generally all require a notary and a wet-ink signature. A 2025 circuit court thesis also holds that digital promissory notes need an Advanced Electronic Signature specifically, though that ruling is contested and not yet binding nationwide.

Does Mexico require a government-certified signature like SAT's e.firma?

Only for specific uses. SAT's e.firma is the tax authority's own implementation of the Advanced tier, required for filings with SAT itself. For ordinary commercial contracts between private parties, a Simple or Advanced signature from any provider that meets Article 97's test is sufficient. No Mexican law requires a domestically accredited certificate for standard B2B agreements.

Can foreign e-signature providers operate in Mexico?

Yes. Mexican commercial law doesn't require signature providers to be domestically licensed for private contracts. Accreditation by the Secretaría de Economía only matters for a specific regulated use case needing a certificate from a Mexican Prestador de Servicios de Certificación. General commercial agreements don't need it.

What data protection rules apply to e-signatures in Mexico?

The LFPDPPP, fully rewritten in March 2025, governs personal data processing with consent and controller obligations. Oversight moved from the now-dissolved INAI to the Secretaría Anticorrupción y Buen Gobierno in May 2025. For e-signature purposes, this means collecting only the data needed to prove signer identity and document integrity, and giving signers a clear privacy notice.

How does Mexico handle cross-border data transfers?

The LFPDPPP allows transfers abroad when the recipient gets a privacy notice and commits to equivalent confidentiality and security standards, with express consent required for sensitive data, financial data, and cross-border transfers specifically. Mexico has no adequacy decision with the EU, and the law doesn't yet define a formal mechanism like the EU's Standard Contractual Clauses for judging a destination country's protections.

What changed with Mexico's 2025 data protection reform?

Mexico replaced its 2010 data protection law with a new LFPDPPP in March 2025, tightening consent and enforcement rules. Around the same time, the National Institute for Transparency and Access to Information (INAI) was dissolved as part of a broader government restructuring, with its data protection duties absorbed by the Secretaría Anticorrupción y Buen Gobierno, a shift some legal commentators worry weakens the regulator's independence.

Sources

  1. Código de Comercio (Art. 89-114 bis): https://mexico.justia.com/federales/codigos/codigo-de-comercio/

  2. Código de Comercio Art. 97 text: https://leyes-mx.com/codigo_de_comercio/97.htm

  3. Código de Comercio Art. 49 (retention): https://leyes-mx.com/codigo_de_comercio/49.htm

  4. Ley de Firma Electrónica Avanzada: https://eservicios.impi.gob.mx/seimpi/ayudaSEIMPI/LFEA.pdf

  5. Secretaría de Economía, Prestadores de Servicios de Certificación: https://www.gob.mx/se/acciones-y-programas/prestadores-de-servicios-de-certificacion

  6. SAT, lista de PSC autorizados: https://wwwmat.sat.gob.mx/aplicacion/23479/lista-de-prestadores-de-servicios-de-certificacion-autorizados

  7. LFPDPPP 2025 overview (White & Case): https://www.whitecase.com/insight-alert/mexico-enacts-new-data-protection-regime

  8. LFPDPPP 2025 overview (Chambers and Partners): https://practiceguides.chambers.com/practice-guides/data-protection-privacy-2026/mexico/trends-and-developments

  9. INAI dissolution (National Law Review): https://natlawreview.com/article/extinction-national-institute-transparency-access-information-and-personal-data

  10. INAI to SABG transition (Global Law Experts): https://globallawexperts.com/the-extinction-of-inai-legal-and-administrative-implications-for-data-protection-and-transparency-in-mexico/

  11. Digital promissory note thesis analysis: https://eljuegodelacorte.nexos.com.mx/cuando-una-tesis-sobre-pagares-digitales-afecta-la-inclusion-financiera/

  12. E-signature legality overview (SignaSuite): https://signasuite.com/blog/en/electronic-signature-mexico

Background Image

Start Building with Firma.dev

Firma.dev handles e-signatures for B2B SaaS, agencies, and internal teams working with Mexico. At €0.049 per envelope (about 5 cents USD) with no monthly minimums, you can ship compliant signing flows without enterprise contracts or procurement delays.

Background Image

Start Building with Firma.dev

Firma.dev handles e-signatures for B2B SaaS, agencies, and internal teams working with Mexico. At €0.049 per envelope (about 5 cents USD) with no monthly minimums, you can ship compliant signing flows without enterprise contracts or procurement delays.

Background Image

Start Building with Firma.dev

Firma.dev handles e-signatures for B2B SaaS, agencies, and internal teams working with Mexico. At €0.049 per envelope (about 5 cents USD) with no monthly minimums, you can ship compliant signing flows without enterprise contracts or procurement delays.