Mexico Personal Data Violation Case: Background
Pharma Plus, S.A. de C.V., for the sale of drugs, had requested the patients to furnish their personal details (including name and address), but failed to provide them with the corresponding privacy notice. The company also failed to inform the patients about the party that is responsible for the data collected.
Mexico Personal Data Violation Case: Analysis & Verdict
After closely analyzing the case, IFAI concluded that the drug company had breached the ‘information principle’ as a privacy notice was not provided, and the ‘identity information principle’ was also violated for failing to provide details of the responsible party.
IFAI imposed a penalty of approximately US$117,649.70 for infringement of the information principle and approximately US$39,216.56 for the breach of the identity information regulation.
Important Lessons for Corporates:
· They must adhere to the prescribed requirements of the personal data protection Law.
· They must implement policies as per company’s specific needs.
· They must evaluate and implement various documents, processes & policies relating to the handling of personal data.
For more information on this topic email firstname.lastname@example.org
Get the latest press releases and updates on international tax, HR, Finance, compliance and other legal news at Nair & Co. Industry Alerts (http://www.nair-