Mexico - Regulation of Emerging Technologies (2025)

Overview

The "Proyecto de decreto que regula tecnologías emergentes, disruptivas e inteligencia artificial" is a constitutional initiative presented on April 30, 2025 by Deputy Gilberto Herrera Ruiz that seeks to reform Article 73 of the Mexican Constitution to grant the Congress of the Union explicit authority to issue general laws on emerging and disruptive technologies, including artificial intelligence. The initiative is published in the official legislative bulletin (Gaceta Parlamentaria, 30 Apr 2025) and frames the reform as necessary to provide a unified national framework for technology governance, aligned with international developments such as the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) and UN resolutions calling for safe, rights-respecting AI. Rather than prescribing detailed technical rules, the decree creates an enabling constitutional mandate: Congress will be authorized to adopt a General Law that sets principles, bases and guidelines for ethical, secure, transparent and human-rights-respecting use of these technologies across Mexico. The draft contains transitional provisions that require the General Law within 180 calendar days of entry into force and harmonization of secondary rules within 90 days, signaling an accelerated timeline for legislative action.

Definitions

The proposed constitutional reform is short on detailed definitions since it is an enabling amendment. However, the explanatory memorandum references "technologies emergentes y disruptivas" to include artificial intelligence, quantum computing, blockchain, advanced biotechnology, robotics and extended realities (AR/VR). The accompanying exposition underscores key regulatory concepts likely to appear in the future General Law: risk-based classification of systems (e.g., low, high, prohibited), obligations for providers and deployers, requirements for transparency, data protection safeguards, human oversight, and obligations to prevent discriminatory outcomes. The initiative explicitly situates "AI" within the broader family of emerging technologies that have cross-sectoral impacts and therefore require harmonized national rules.

Governance and Institutional Framework

The decree creates a constitutional basis for national governance by conferring explicit competence on Congress to legislate; it does not itself establish regulatory agencies. The explanatory text anticipates a multi-institutional governance model in the subsequent General Law involving federal ministries (for example, the Secretaría de Economía, Secretaría de Gobernación, and Secretaría de Salud), the national data protection authority (INAI), sectoral regulators and supervisory bodies. The initiative emphasizes cooperative federalism: while the Congress will set national principles and lineaments, entities, municipalities and Mexico City delegations may adopt complementary local legislation consistent with the national framework. The text therefore contemplates centralized standard-setting with coordinated subnational implementation to avoid regulatory fragmentation and ensure rights protection nationwide.

Key Focus Areas

The exposition outlines several core policy priorities that the forthcoming General Law should address: (1) Fundamental rights protection — privacy, non-discrimination and due process when automated decision-making affects individuals; (2) Risk-based regulation — classification of systems by potential harm and differentiated obligations (transparency, testing, human oversight); (3) Safety, robustness and cybersecurity — requirements for resilience, incident reporting and secure design; (4) Transparency, explainability and auditability — documentation, record-keeping and disclosure obligations for high-risk systems; (5) Accountability and liability — assignment of responsibilities between developers, deployers and operators, and remedial mechanisms for harms; (6) Market surveillance and conformity assessment — registries, pre-market controls and post-market monitoring; (7) Research, innovation and capacity-building — support for ethical R&D and public interest uses; (8) International cooperation and alignment with instruments like the EU AI Act and UN guidance. These areas reflect a comprehensive regulatory ambition to govern not only AI but a wider class of disruptive technologies across sectors including health, finance, security and public administration.

Implementation Framework

The draft decree’s transitory provisions create mandatory timeframes to convert the constitutional authorization into concrete law: entry into force occurs the day after publication; within 90 calendar days Congress must harmonize applicable secondary laws; and within 180 calendar days it must issue a General Law on Emerging, Disruptive Technologies and Artificial Intelligence. The General Law, as mandated by the decree, is expected to define risk categories, create mandatory registries or conformity procedures for certain classes of systems, set obligations for transparency and human oversight, prescribe sector-specific safeguards (e.g., for healthcare and finance), and designate or empower existing agencies to oversee enforcement, market surveillance and technical standardization. The implementation model therefore follows a two-stage process — constitutional enabling amendment followed by detailed statutory regulation and delegated rulemaking by competent authorities.

Monitoring and Evaluation

While the constitutional proposal does not create a specific monitoring agency, it requires Congress to enact a General Law that includes monitoring, evaluation and review mechanisms. Anticipated components include: a national registry or inventory of high-risk systems; reporting obligations for incidents and harms; periodic impact assessments and public reporting; independent audits and algorithmic impact assessments for high-risk deployments; and performance indicators to evaluate whether rules protect rights and promote innovation. The draft encourages evidence-based review cycles to update technical standards and to ensure regulatory agility in response to rapidly evolving technologies, drawing on international best practices and cross-sectoral data collection coordinated among federal institutions and the INAI.

Penalties, Liability, and Appeals

The initiative itself does not prescribe penalties but requires the enabling General Law to set enforcement mechanisms, sanctions and remedies. The future law is expected to include administrative fines for non-compliance (scaled by the severity of harm and economic capacity), obligations to suspend or remediate non-compliant systems, civil liability channels for affected individuals (including compensation and injunctive relief), and criminal sanctions in cases of intentional wrongdoing (e.g., manipulative or fraudulent deployment causing serious harm). The draft also anticipates procedural safeguards including administrative review, judicial appeal rights and specialized dispute resolution pathways to handle technical evidence and complex causation questions related to AI-driven harms.

Relationship to Other Instruments

The explanatory memorandum situates the proposal within a landscape of existing Mexican and international law. Constitutionally, it amends Article 73 to allocate legislative competence to Congress. The upcoming General Law will need to interact with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties, consumer protection statutes (PROFECO), sector-specific laws (health, financial services), the Federal Penal Code, and transparency/access to information regimes. The initiative explicitly references international instruments as benchmarks including the EU AI Act and UN resolutions, implying that the new General Law will seek interoperability with these frameworks and avoid conflicts with Mexico’s international commitments. Coordination clauses and supremacy rules will be essential to clarify interactions across overlapping legal regimes.

International Alignment

The package expressly frames Mexico’s approach in light of international developments: it cites the European Union’s AI regulatory framework (Regulation (EU) 2024/1689), a March 2024 UN General Assembly resolution on promoting safe and rights-respecting AI (UN GA resolutions, 2024), OECD guidance and other multilateral instruments. By creating a federal competence to legislate, the draft seeks to enable national rules that can align with international standards, facilitate cross-border data flows under appropriate safeguards, and support Mexico’s participation in international regulatory cooperation, standard-setting and mutual recognition arrangements. The transnational orientation aims to reduce regulatory fragmentation and promote trade and innovation while protecting rights.

Implementation Timeline

Event	Date
Initiative submitted to the Chamber of Deputies (Gaceta Parlamentaria)	2025-04-30
Decree enters into force (upon publication in the Diario Oficial de la Federación)	Day after publication (TBD)
Congress must harmonize secondary laws (90 calendar days)	2025-07-29 (90 days from 2025-04-30)
Congress must issue General Law on Emerging, Disruptive Technologies and AI (180 calendar days)	2025-10-27 (180 days from 2025-04-30)

Compliance Checklist

Requirement	Who	Evidence/Action
Register high-risk systems (if required by General Law)	Providers/Deployers	Entry in national registry; technical dossier
Conduct algorithmic impact assessment	Providers/Operators	Published AIA report; retained documentation for audits
Implement human oversight controls	Deployers	Operational policies, logs and training records
Data protection compliance	Operators	Data protection impact assessments; INAI notifications
Report serious incidents	Providers/Deployers	Incident report to competent authority within mandated timeframe

Sources and References

Source	Type
Gaceta Parlamentaria: Initiative by Deputy Gilberto Herrera Ruiz (30 Apr 2025)	Primary Source
Regulation (EU) 2024/1689 - Artificial Intelligence Act	Primary Source
United Nations General Assembly Resolutions (2024) on Artificial Intelligence	Primary Source