Mexico - Federal AI Legislative Initiatives

Federal Artificial Intelligence legislative initiatives and Senate commission proposal (2023–2025)

Iniciativas legislativas federales de inteligencia artificial y propuesta de comisión del Senado (2023–2025)

Mexico

RAI-MX-NA-FAILIXX-2025
Under Review(Under Review)
BillGovernance and OversightRisk ManagementConformity Assessment and Registration
Export PDF

Between 2023 and 2025 Mexico did not promulgate a consolidated federal AI Act but multiple parliamentary initiatives and a Senate commission process advanced proposals for a general AI law, constitutional enabling reforms, prohibitions on specific high‑risk uses, risk classification schemes and institutional governance bodies. Key texts are parliamentary initiatives and Senate commission reports published in official gazettes and commission sites.

Summary

From 2023 through 2025 federal lawmakers and Senate committees initiated and circulated multiple legislative proposals and technical reports aiming to create a comprehensive national framework for artificial intelligence. Actions include: (i) proposals to amend the Constitution to expressly empower the Congress to legislate on AI; (ii) at least one full draft legislative initiative filed in the Chamber of Deputies entitled "Ley Federal para el Desarrollo Ético, Soberano e Inclusivo de la Inteligencia Artificial" (registered as expediente 2330) and other related initiatives submitted to the Gaceta Parlamentaria; and (iii) a Senate Commission (Comisión de Análisis, Seguimiento y Evaluación sobre la Aplicación y Desarrollo de la Inteligencia Artificial en México) that held multi‑stage conversatorios and produced a proposed normative framework for a federal law. These documents propose a risk‑based categorization (e.g., minimal, limited, high, prohibited), institutional governance (national council, registries, audit platforms), prohibitions on certain surveillance and social‑scoring uses, transparency and rights to explanation/contestability, and sectoral implementation obligations. None of the proposals had been promulgated as binding federal law as of the retrieval date; they remain at committee, plenary referral or consultation stages as recorded in official parliamentary gazettes and committee pages. Expediente 2330 Senate Commission microsite.

Full article

Read full text ↗

Overview

Between late 2023 and 2025 the principal federal legislative activity on artificial intelligence in Mexico consisted of multiple congressional initiatives and a dedicated Senate commission that convened experts and published a proposed normative structure. The most directly traceable federal initiative is the Deputies' filing identified as Expediente 2330, "Iniciativa con proyecto de decreto por el que se expide la Ley Federal para el Desarrollo Ético, Soberano e inclusivo de la Inteligencia Artificial," which appears in the Gaceta Parlamentaria and was turned to the relevant commissions for opinion and dictamen. The Senate established the Comisión de Análisis, Seguimiento y Evaluación sobre la Aplicación y Desarrollo de la Inteligencia Artificial en México which conducted a series of conversatorios and prepared a proposal/capitulado to guide a new law. These primary official records are accessible on the Gaceta Parlamentaria and the official Senate commission site. Expediente 2330 Senate Commission microsite.

Definitions

Draft proposals filed in the Gaceta define core terms such as "systems of artificial intelligence" and scope criteria linking application to treatment of personal data and effects in Mexican territory. For example, draft provisions included in later Gaceta publications set definitions for "Sistemas de inteligencia artificial" and for scope linked to effects on persons and infrastructure located in Mexico. See the Gaceta text for the full definitional regime. Gaceta 2 Dec 2025 — definitions and scope.

Governance and Institutional Framework

The drafted measures commonly propose creation or designation of national governance entities: a Council or Consejo Nacional de Inteligencia Artificial, a Registry of AI Systems (Registro Nacional de Sistemas de Inteligencia Artificial) and a Platform for Algorithmic Audit (Plataforma Nacional de Auditoría Algorítmica). These institutional proposals appear as recurring elements in the Deputies' initiatives (Expediente 2330) and in documents circulated by the Senate commission as the basis for legislative chapters. See the Deputies' initiative listing and Commission materials for institutional architecture references. Expediente 2330 Senate Commission meetings and report.

Key Focus Areas

Across the proposals and commission outputs the principal regulatory themes include: (i) risk classification of AI systems (minimal/limited/high/prohibited); (ii) prohibitions on mass biometric surveillance without judicial order, social scoring, manipulative psychological profiling and other specified injurious uses; (iii) transparency obligations (notice when automated decisions affect persons, explanation and contestability rights); (iv) data protection harmonization with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares; (v) conformity, registration and prior notification/impact assessments particularly for high‑risk systems; and (vi) provisions on public procurement and use by public authorities. These themes are explicitly called out in the parliamentary initiatives and Senate commission materials. Gaceta 2 Dec 2025 — prohibitions and classifications Senate communiqué — conversatorios concluded.

Implementation Framework

Draft legislation contemplates phased implementation, transitory provisions requiring the Executive to issue lineamientos and technical standards within set periods (commonly 90–180 days) after enactment, and inter‑agency coordination with data protection authorities and sectoral regulators. The Gaceta texts include transitory clauses directing the Executive and specific secretariats to publish implementing rules within concrete timeframes. Gaceta transitorios (example).

Monitoring and Evaluation

Proposals embed monitoring functions in the proposed Council and envisage mandatory reporting, audit powers and a national registry intended to support market surveillance and enforcement. The Senate Commission report and Deputies' initiative refer to ongoing evaluation and creation of governance indicators. See the Commission's meeting records and the Deputies' initiative entry in the Gaceta. Senate Commission — governance and monitoring Gaceta listing — Deputies' initiative.

Penalties, Liability, and Appeals

While text and sanctioning regimes differ between proposals, the drafts lodged in the Gaceta anticipate administrative sanctions for non‑registration and non‑compliance and potential criminal or civil liabilities for harms caused by prohibited uses. Specific penalty amounts and criminal articles are subject to the text of each initiative and to committee drafting. The Gaceta entries that include substantive draft articles and transitory provisions are the authoritative primary source for the proposed penalties. Gaceta — draft sanctions and transitorios.

Relationship to Other Instruments

Initiatives reference alignment and interaction with existing Mexican instruments such as the Ley Federal de Protección de Datos Personales en Posesión de los Particulares and sectoral laws (health, education, justice), proposing amendments or complementary rules. Several initiatives propose constitutional enabling reforms to Article 73 to expressly empower Congress to legislate on AI. See the initiative filings and Gaceta notices for reform proposals to Article 73. Deputies press notice — Article 73 reform proposals Gaceta — expediente references.

International Alignment

Parliamentary materials and the Senate commission explicitly note the EU AI Act and international standards as reference points and propose a risk‑based approach compatible with international frameworks while emphasizing national sovereignty, digital sovereignty and adaptation to Mexico's socio‑economic context. The Senate Commission's materials record comparative references to the EU AI Act and international consultations. Senate Commission — international references.

Implementation Timeline

Date/PeriodMilestoneStatus
Dec 2024 – Apr 2025Senate Commission convened conversatorios and hearings to draft frameworkCompleted (conversatorios concluded April 29, 2025)
Apr 22, 2025Filing of "Ley Federal para el Desarrollo Ético, Soberano e Inclusivo de la Inteligencia Artificial" (Expediente 2330) in Chamber of DeputiesFiled / Referred to commissions
Jun 17, 2025Gaceta listing records Expediente 2330 and commission referralsPublic record (Gaceta)
Dec 2, 2025Gaceta publication including draft provisions on AI definitions, prohibitions and transitory obligationsPublic record / continued committee processing

Primary official sources for these timeline entries are the Senate commission site and Gaceta Parlamentaria. Senate Commission Gaceta 17 Jun 2025 Gaceta 2 Dec 2025.

Sources and References

DocumentTypeLink
Gaceta Parlamentaria — Iniciativa Ley Federal para el Desarrollo Ético, Soberano e Inclusivo de la IA (Expediente 2330)Parliamentary gazette / initiative textGaceta 17 Jun 2025 (Expediente 2330)
Gaceta Parlamentaria — Iniciativas y textos relacionados (Dec 2, 2025)Parliamentary gazette / initiative text including draft articles and transitoriosGaceta 2 Dec 2025
Senate Commission on AI — microsite, meetings, report and conversatoriosSenate commission official site and meeting recordSenate Commission microsite
Cámara de Diputados — Comunicación Social (press announcement on Morena/PVEM initiative)Chamber of Deputies press releaseDeputies press release Apr 22, 2025

Requirements for a company

What an organisation has to do under Mexico - Federal AI Legislative Initiatives, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Not yet in force (Under Review). These requirements apply once the instrument takes effect and may change before then.

Must do

8
  • Do not use AI systems for mass biometric surveillance without judicial order, social scoring, or manipulative psychological profiling.All AI system developers and deployers in Mexico.
  • Classify AI systems based on their risk level (minimal, limited, high, or prohibited).Providers and deployers of AI systems.
  • Register high-risk AI systems in the National Registry of AI Systems.Providers and deployers of high-risk AI systems.
  • Conduct and retain AI impact assessments for high-risk systems prior to deployment.Providers and deployers of high-risk AI systems.
  • Notify individuals when automated decisions affect them, providing explanation and contestability rights.Deployers of AI systems making decisions affecting persons.
  • Harmonize AI system operations with the Federal Law on Protection of Personal Data Held by Private Parties.All AI system providers and deployers processing personal data.
  • +2 more in the table below

Must not do

0

Nothing in this category.

Should do

0

Nothing in this category.

Should not do

0

Nothing in this category.

Who must do what

The obligations under Mexico - Federal AI Legislative Initiatives, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1All AI system developers and deployers in Mexico.Do not use AI systems for mass biometric surveillance without judicial order, social scoring, or manipulative psychological profiling.
prohibitions on mass biometric surveillance without judicial order, social scoring, manipulative psychological profiling and other specified injurious uses
Critical
2Providers and deployers of AI systems.Classify AI systems based on their risk level (minimal, limited, high, or prohibited).
risk classification of AI systems (minimal/limited/high/prohibited)
Critical
3Providers and deployers of high-risk AI systems.Register high-risk AI systems in the National Registry of AI Systems.
Register systems classified as "high risk" in the National Registry as proposed by draft initiatives.
As established in transitory provisions after enactment (commonly 90–180 days in drafts).Critical
4Providers and deployers of high-risk AI systems.Conduct and retain AI impact assessments for high-risk systems prior to deployment.
prior notification/impact assessments particularly for high‑risk systems
Prior to deployment; timing to be specified in implementing rules.Critical
5Deployers of AI systems making decisions affecting persons.Notify individuals when automated decisions affect them, providing explanation and contestability rights.
transparency obligations (notice when automated decisions affect persons, explanation and contestability rights)
Immediate upon operational use; subject to sectoral exceptions in drafts.Important
6All AI system providers and deployers processing personal data.Harmonize AI system operations with the Federal Law on Protection of Personal Data Held by Private Parties.
data protection harmonization with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares
Important
7Providers and deployers of high-risk AI systems.Ensure high-risk AI systems meet conformity requirements.
conformity, registration and prior notification/impact assessments particularly for high‑risk systems
Important
8Public authorities procuring or using AI systems.Adhere to specific provisions for public procurement and use of AI by public authorities.
provisions on public procurement and use by public authorities
Important

© Regulations.AI · updated on 06-Jan-2026