As Mexico takes steps to introduce new legislation regarding data collection, ARTICLE 19 warns of the profound risks to human rights, and the dangerous precedent such as move sets. We urge the government to protect digital rights, essential to any democracy.
In recent months, the Mexican government has published a package of laws and reforms that enable the collection, interconnection, and analysis of biometric, financial, fiscal, health, telecommunications, and geolocation data on the country’s entire population. This system, operated by civilian and military authorities, lacks effective safeguards and represents a serious setback in human rights.
Among the most concerning provisions are:
- The mandatory biometric Unique Population Registry Code (CURP), which consolidates sensitive data on a state platform interconnected with public and private databases.
- The creation of a Central Intelligence Platform, which will allow the National Intelligence Center and the National Guard to access, in real time, databases containing personal information held by public and private entities without judicial authorisation.
- The reiteration of real-time geolocation powers without a court order, even by military forces.
- The proposed addition of Article 30-B to the Federal Tax Code, which, when implemented, will empower the Tax Administration Service (SAT) to request a temporary blocking of digital platforms when it deems that they ‘impede compliance with tax provisions’.
These reforms add to a worrying pattern ARTICLE 19 has documented in Mexico, which has included the use of Pegasus malware against journalists and defenders, extrajudicial surveillance of activists, and abuse of access to telecommunications data. Despite opposition from ARTICLE 19 and activist groups, these practices are on the way to being legalised and normalised.
What is happening in Mexico today sets a dangerous regional precedent. The protection of digital rights is essential to any democracy.