Senate advances personal data laws

Senator María del Rocío Corona Nakamura spoke in the Senate about a draft decree that would enact the General Law on Transparency and Access to Public Information, the General Law on the Protection of Personal Data Held by Obligated Entities, and the Federal Law on the Protection of Personal Data Held by Private Parties. The proposal would also amend provisions of the Federal Public Administration Organic Law.

What did the Senate discuss?

The legislative debate focused on a regulatory package covering transparency and the handling of personal data, with changes affecting both obligated entities and private parties. The Senate recorded the intervention on October 29, 2026, during a session tied to that draft decree.

What is happening with the cybersecurity law?

According to an unconfirmed press report, the roadmap in the 2025-2030 National Cybersecurity Plan called for publishing a General Cybersecurity Law during the second half of 2026, but the bill was still pending in Congress.

That places the cybersecurity agenda in a different position from the transparency and personal data initiatives, which had at least advanced to debate in the upper chamber. The available material does not specify the bill’s exact parliamentary status or provide additional details about its content.