Argentina and Mexico push new data protection legislation

In Argentina, Deputy Agustín Rossi introduced a bill to create a comprehensive personal data protection regime, repealing older statutes and expanding definitions to include anonymisation, biometric data and profiling. The proposal applies to both domestic and foreign entities processing data in Argentina, mandates explicit consent, sets a 72‑hour breach notification window and outlines new bases for lawful processing.

In Mexico, the state Congress approved two initiatives that would replace the existing Commission for Access to Public Information (CEGAIP) with the Instituto Potosino de Apertura Gubernamental (IPAG) and enact a new state law on transparency and personal data protection. The measures, presented by Deputy Luis Felipe Castro Barrón with executive technical support, aim to divide CEGAIP’s functions between the new institute and internal control bodies of other branches of government.