Mexico

Data subjects have the following rights: i) Access.- you can request to the data controller if they have any personal data in their data base belonging to you. ii) Correction.- is the right to correct any inaccurate personal data that the data controller might have in their data base. iii) Cancellation.- is the right to request the cancellation of your personal data from the data base of the data controller. The personal data shall be blocked and, thereafter, eliminated from the data base. iv) Opposition.- is the right to request to the data controller, to stop using your personal data for specific situations (i.e. advertising matters).
To exercise data subject’s rights under the Privacy Law, it is necessary for the data subject to file a writ directly to the data controller with his/her petition. Data controller will have 20 business days to respond the petition and 15 more business days to comply with the petition. In the event data collector refuses to comply with the petition and/or in the event the data subject is not comfortable with the response of the data collector, data subject may enforce the protection of personal data before INAI.
The exercise of each of these rights is independent from the exercise of other rights.
To exercise data subject’s rights under the Governmental Privacy Law, it is necessary for the data subject to file a writ directly to the Transparency Area at the corresponding governmental entity with his/her petition. Such Area will have 15 business days to respond the petition and 10 more business days to comply with the petition. In the event such Area refuses to comply with the petition and/or in the event the data subject is not comfortable with the response of the Area, data subject may file a writ of appeal.