Mexican Football Federation fined 42.8 million pesos for data‑protection breaches in Fan ID

Mexico’s Secretariat of Anti‑Corruption and Good Governance imposed a penalty of 42,849,095 pesos on the Mexican Football Federation (FMF). The sanction follows two violations of the Federal Law on the Protection of Personal Data: the federation failed to inform fans that biometric photographs collected for the Fan ID system constitute sensitive personal data, and it did not obtain explicit, written consent from users, relying only on a simple checkbox on its website. The authority said the fine was calculated based on the seriousness of the infractions, the sensitive nature of the biometric data, and the FMF’s economic capacity. The Fan ID platform, created after stadium violence incidents, is used to identify spectators entering Liga MX venues. The FMF may appeal the resolution.

The resolution also noted that the FMF breached the principles of legality and responsibility by not implementing adequate measures to protect the data it processes.