Mexican Civil Society Raises Alarm Over New Mass Surveillance Laws Passed in July

New Laws Centralize Data and Expand State Powers

In July 2025, the Mexican Congress approved a series of legislative reforms that have drawn significant criticism from civil society organizations, who warn of their potential for mass surveillance and infringement on fundamental rights. The package of laws, passed during an extraordinary legislative session that concluded on July 1, 2025, includes the National Intelligence and Investigation System Law, amendments to the General Law on Forced Disappearances and the General Population Law, and reforms to the Federal Telecommunications Law and the National Guard Law.

These new measures establish a comprehensive framework for state surveillance, creating interconnected platforms for collecting vast amounts of personal data. The National Intelligence and Investigation System Law introduces a broad platform for gathering public and private information, encompassing biometric data, health records, banking details, and telecommunications information. Critics highlight that this law, sometimes referred to as 'Ley Espía' ('spy law'), allows for the use of artificial intelligence to process this information and, in some instances, grants access without requiring a judicial warrant.

Mandatory Biometric Identification and Data Sharing

A key component of the reforms is the establishment of a mandatory national identification system based on biometric data, known as CURP (Unique Population Registration Code). Amendments to the General Population Law mandate the use of biometric information, such as fingerprints and facial recognition, for all bureaucratic procedures and many commercial transactions. Civil society groups argue that this system, along with a new Unique Identity Platform under the Disappeared Persons Act, creates a mechanism for tracking individuals' activities, accessible through a broader Central Intelligence Platform.

Furthermore, the General Law of the National Public Security System establishes a National Information System designed to aggregate data from all levels of government and private entities. The reforms also grant the National Guard expanded powers, including the ability to intervene in communications and conduct covert operations. Private companies, both domestic and international, are reportedly required to either interconnect their databases or provide information upon request, with Mexican authorities potentially sharing this data with foreign governments.

Civil Society Organizations Raise Grave Concerns

Mexican civil society organizations, including La Red en Defensa de los Derechos Digitales (R3D), Article 19 Mexico, and the Miguel Agustín Pro Juárez Human Rights Center (Centro Prodh), have vehemently opposed these laws. They contend that the legislation constitutes an 'uncontrolled system of surveillance and social control' that infringes upon privacy, free expression, and the presumption of innocence. Concerns include the potential for 'mass state surveillance or exclusion from access to public services' and the erosion of fundamental rights due to broad data access without adequate judicial oversight.

Activists and human rights defenders have drawn parallels between these reforms and the U.S. Patriot Act, noting a common trend of expanding state surveillance in the name of security. They warn of significant risks, including data leaks, cybercrime, espionage, and illicit access by organized crime, particularly given the lack of clear technical safeguards. Despite these widespread concerns, President Claudia Sheinbaum has denied that the government intends to use the CURP system to track citizens, stating, 'It's meant to build a safe, peaceful country. It's not true that anyone is being spied on.'