Utilizziamo cookies e tecnologie similari per migliorare l’esperienza all’interno del sito e offrire all’utente un servizio di maggior valore. I cookie presenti su questo sito sono cookie tecnici per garantire il funzionamento del sito e cookie analitici, anche di terze parti, utilizzati da noi e dai nostri partner per misurare le performance del Sito e capire i contenuti che vi interessano. Per accettare i cookie clicca «accetta i cookie analitici». Per rifiutare i cookie clicca «rifiuta i cookie analitici». Per maggiori informazioni ti invitiamo a leggere la nostra Cookie Policy.

Data Protection and Covid-19 vaccination


​​published on 28 July 2021 | reading time approx. 2 minutes

The National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) has demanded the protection of personal data within the documentation requested to be vaccinated in order to avoid the existence of improper practices and the commitment of crimes that may come with the use of personal information.

In Mexico, the documentation requested by the authorities as part of the vaccination process contains the following: official identification, which contains personal data, such as name, age, sex, address, information about existing allergies and the Unique Population Registry Code (CURP).

Nevertheless in many cases the federal health authorities additionally requests a simple copy of the personal documentation of the citizens to be vaccinated, take photographs of said documentation or even take a photograph to the citizens during the process. Due to the fact that this practice is against the principle of proportionality established in the General Law of Protection of Personal Data Held by Obliged Subjects, that means that said interference with the data protection rights of the persons is not proportional to its purpose the INAI, it has requested to the federal health authorities to avoid asking for this further information.

In the event that the federal authorities do not have a privacy notice and request such documentation, said infringing authorities are subjected to an administrative and economic sanction, which cannot be paid with public resources, but has to be borne directly by the director responsible for the infringing authority.

As this practice is not justified for any reason, the INAI has advised the owners of the personal data that they should request the corresponding privacy notice from the health authorities and report them immediately before the INAI to be able to exercise their Cancellation and Opposition rights to avoid the improper use of information in case that simple copies of their documentation are requested or in case the authority requires to take photographs.


Our newsletter aims at collecting updates, news and insights on data protection matters worldwide, 
with a special focus on the GDPR. 


Contact Person Picture

Liliana Becerra

Attorney at Law

Senior Associate

+52 222 689 45 19

Invia richiesta


​​Discover more about our offices in Mexico. Read more »
Deutschland Weltweit Search Menu