Mexico - Federal AI Legislative Initiatives
Federal Artificial Intelligence legislative initiatives and Senate commission proposal (2023–2025)
Iniciativas legislativas federales de inteligencia artificial y propuesta de comisión del Senado (2023–2025)
Mexico
RAI-MX-NA-FAILIXX-2025Between 2023 and 2025 Mexico did not promulgate a consolidated federal AI Act but multiple parliamentary initiatives and a Senate commission process advanced proposals for a general AI law, constitutional enabling reforms, prohibitions on specific high‑risk uses, risk classification schemes and institutional governance bodies. Key texts are parliamentary initiatives and Senate commission reports published in official gazettes and commission sites.
Summary
Full article
Read full text ↗Overview
Between late 2023 and 2025 the principal federal legislative activity on artificial intelligence in Mexico consisted of multiple congressional initiatives and a dedicated Senate commission that convened experts and published a proposed normative structure. The most directly traceable federal initiative is the Deputies' filing identified as Expediente 2330, "Iniciativa con proyecto de decreto por el que se expide la Ley Federal para el Desarrollo Ético, Soberano e inclusivo de la Inteligencia Artificial," which appears in the Gaceta Parlamentaria and was turned to the relevant commissions for opinion and dictamen. The Senate established the Comisión de Análisis, Seguimiento y Evaluación sobre la Aplicación y Desarrollo de la Inteligencia Artificial en México which conducted a series of conversatorios and prepared a proposal/capitulado to guide a new law. These primary official records are accessible on the Gaceta Parlamentaria and the official Senate commission site. Expediente 2330 Senate Commission microsite.
Definitions
Draft proposals filed in the Gaceta define core terms such as "systems of artificial intelligence" and scope criteria linking application to treatment of personal data and effects in Mexican territory. For example, draft provisions included in later Gaceta publications set definitions for "Sistemas de inteligencia artificial" and for scope linked to effects on persons and infrastructure located in Mexico. See the Gaceta text for the full definitional regime. Gaceta 2 Dec 2025 — definitions and scope.
Governance and Institutional Framework
The drafted measures commonly propose creation or designation of national governance entities: a Council or Consejo Nacional de Inteligencia Artificial, a Registry of AI Systems (Registro Nacional de Sistemas de Inteligencia Artificial) and a Platform for Algorithmic Audit (Plataforma Nacional de Auditoría Algorítmica). These institutional proposals appear as recurring elements in the Deputies' initiatives (Expediente 2330) and in documents circulated by the Senate commission as the basis for legislative chapters. See the Deputies' initiative listing and Commission materials for institutional architecture references. Expediente 2330 Senate Commission meetings and report.
Key Focus Areas
Across the proposals and commission outputs the principal regulatory themes include: (i) risk classification of AI systems (minimal/limited/high/prohibited); (ii) prohibitions on mass biometric surveillance without judicial order, social scoring, manipulative psychological profiling and other specified injurious uses; (iii) transparency obligations (notice when automated decisions affect persons, explanation and contestability rights); (iv) data protection harmonization with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares; (v) conformity, registration and prior notification/impact assessments particularly for high‑risk systems; and (vi) provisions on public procurement and use by public authorities. These themes are explicitly called out in the parliamentary initiatives and Senate commission materials. Gaceta 2 Dec 2025 — prohibitions and classifications Senate communiqué — conversatorios concluded.
Implementation Framework
Draft legislation contemplates phased implementation, transitory provisions requiring the Executive to issue lineamientos and technical standards within set periods (commonly 90–180 days) after enactment, and inter‑agency coordination with data protection authorities and sectoral regulators. The Gaceta texts include transitory clauses directing the Executive and specific secretariats to publish implementing rules within concrete timeframes. Gaceta transitorios (example).
Monitoring and Evaluation
Proposals embed monitoring functions in the proposed Council and envisage mandatory reporting, audit powers and a national registry intended to support market surveillance and enforcement. The Senate Commission report and Deputies' initiative refer to ongoing evaluation and creation of governance indicators. See the Commission's meeting records and the Deputies' initiative entry in the Gaceta. Senate Commission — governance and monitoring Gaceta listing — Deputies' initiative.
Penalties, Liability, and Appeals
While text and sanctioning regimes differ between proposals, the drafts lodged in the Gaceta anticipate administrative sanctions for non‑registration and non‑compliance and potential criminal or civil liabilities for harms caused by prohibited uses. Specific penalty amounts and criminal articles are subject to the text of each initiative and to committee drafting. The Gaceta entries that include substantive draft articles and transitory provisions are the authoritative primary source for the proposed penalties. Gaceta — draft sanctions and transitorios.
Relationship to Other Instruments
Initiatives reference alignment and interaction with existing Mexican instruments such as the Ley Federal de Protección de Datos Personales en Posesión de los Particulares and sectoral laws (health, education, justice), proposing amendments or complementary rules. Several initiatives propose constitutional enabling reforms to Article 73 to expressly empower Congress to legislate on AI. See the initiative filings and Gaceta notices for reform proposals to Article 73. Deputies press notice — Article 73 reform proposals Gaceta — expediente references.
International Alignment
Parliamentary materials and the Senate commission explicitly note the EU AI Act and international standards as reference points and propose a risk‑based approach compatible with international frameworks while emphasizing national sovereignty, digital sovereignty and adaptation to Mexico's socio‑economic context. The Senate Commission's materials record comparative references to the EU AI Act and international consultations. Senate Commission — international references.
Implementation Timeline
| Date/Period | Milestone | Status |
|---|---|---|
| Dec 2024 – Apr 2025 | Senate Commission convened conversatorios and hearings to draft framework | Completed (conversatorios concluded April 29, 2025) |
| Apr 22, 2025 | Filing of "Ley Federal para el Desarrollo Ético, Soberano e Inclusivo de la Inteligencia Artificial" (Expediente 2330) in Chamber of Deputies | Filed / Referred to commissions |
| Jun 17, 2025 | Gaceta listing records Expediente 2330 and commission referrals | Public record (Gaceta) |
| Dec 2, 2025 | Gaceta publication including draft provisions on AI definitions, prohibitions and transitory obligations | Public record / continued committee processing |
Primary official sources for these timeline entries are the Senate commission site and Gaceta Parlamentaria. Senate Commission Gaceta 17 Jun 2025 Gaceta 2 Dec 2025.
Sources and References
| Document | Type | Link |
|---|---|---|
| Gaceta Parlamentaria — Iniciativa Ley Federal para el Desarrollo Ético, Soberano e Inclusivo de la IA (Expediente 2330) | Parliamentary gazette / initiative text | Gaceta 17 Jun 2025 (Expediente 2330) |
| Gaceta Parlamentaria — Iniciativas y textos relacionados (Dec 2, 2025) | Parliamentary gazette / initiative text including draft articles and transitorios | Gaceta 2 Dec 2025 |
| Senate Commission on AI — microsite, meetings, report and conversatorios | Senate commission official site and meeting record | Senate Commission microsite |
| Cámara de Diputados — Comunicación Social (press announcement on Morena/PVEM initiative) | Chamber of Deputies press release | Deputies press release Apr 22, 2025 |
Requirements for a company
What an organisation has to do under Mexico - Federal AI Legislative Initiatives, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Under Review). These requirements apply once the instrument takes effect and may change before then.
Must do
8- Do not use AI systems for mass biometric surveillance without judicial order, social scoring, or manipulative psychological profiling.All AI system developers and deployers in Mexico.
- Classify AI systems based on their risk level (minimal, limited, high, or prohibited).Providers and deployers of AI systems.
- Register high-risk AI systems in the National Registry of AI Systems.Providers and deployers of high-risk AI systems.
- Conduct and retain AI impact assessments for high-risk systems prior to deployment.Providers and deployers of high-risk AI systems.
- Notify individuals when automated decisions affect them, providing explanation and contestability rights.Deployers of AI systems making decisions affecting persons.
- Harmonize AI system operations with the Federal Law on Protection of Personal Data Held by Private Parties.All AI system providers and deployers processing personal data.
- +2 more in the table below
Must not do
0Nothing in this category.
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under Mexico - Federal AI Legislative Initiatives, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | All AI system developers and deployers in Mexico. | Do not use AI systems for mass biometric surveillance without judicial order, social scoring, or manipulative psychological profiling. “prohibitions on mass biometric surveillance without judicial order, social scoring, manipulative psychological profiling and other specified injurious uses” | — | — | Critical |
| 2 | Providers and deployers of AI systems. | Classify AI systems based on their risk level (minimal, limited, high, or prohibited). “risk classification of AI systems (minimal/limited/high/prohibited)” | — | — | Critical |
| 3 | Providers and deployers of high-risk AI systems. | Register high-risk AI systems in the National Registry of AI Systems. “Register systems classified as "high risk" in the National Registry as proposed by draft initiatives.” | As established in transitory provisions after enactment (commonly 90–180 days in drafts). | — | Critical |
| 4 | Providers and deployers of high-risk AI systems. | Conduct and retain AI impact assessments for high-risk systems prior to deployment. “prior notification/impact assessments particularly for high‑risk systems” | Prior to deployment; timing to be specified in implementing rules. | — | Critical |
| 5 | Deployers of AI systems making decisions affecting persons. | Notify individuals when automated decisions affect them, providing explanation and contestability rights. “transparency obligations (notice when automated decisions affect persons, explanation and contestability rights)” | Immediate upon operational use; subject to sectoral exceptions in drafts. | — | Important |
| 6 | All AI system providers and deployers processing personal data. | Harmonize AI system operations with the Federal Law on Protection of Personal Data Held by Private Parties. “data protection harmonization with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares” | — | — | Important |
| 7 | Providers and deployers of high-risk AI systems. | Ensure high-risk AI systems meet conformity requirements. “conformity, registration and prior notification/impact assessments particularly for high‑risk systems” | — | — | Important |
| 8 | Public authorities procuring or using AI systems. | Adhere to specific provisions for public procurement and use of AI by public authorities. “provisions on public procurement and use by public authorities” | — | — | Important |
Related Regulations
Iniciativa para reformar la fracción XVII del artículo 73 de la Constitución en materia de Inteligencia Artificial (Constitutional reform to grant Congress power to legislate on AI)
Mexico94% similar
Proyecto de decreto que regula tecnologías emergentes, disruptivas e inteligencia artificial (Bill to regulate emerging/disruptive technologies and AI)
Mexico93% similar
Mexico AI Regulation Overview
Mexico93% similar
Proyecto: Ley para la Regulación Ética de la Inteligencia Artificial y la Robótica (Bill for the Ethical Regulation of Artificial Intelligence and Robotics)
Mexico93% similar
Iniciativa que adiciona disposiciones para el uso de Inteligencia Artificial por unidades de seguridad pública (Bill authorizing/setting rules for AI use in public security investigations)
Mexico93% similar
© Regulations.AI · updated on 06-Jan-2026