Federal Law on the Development and Use of Artificial Intelligence
Mexico's framework for regulating AI development emphasizes protecting individual rights while fostering innovation. Includes provisions for algorithmic transparency, data protection, and ethical AI development. Establishes oversight mechanisms and requires impact assessments for high-risk AI applications.
| Jurisdiction | Mexico |
|---|---|
| Category | AI Regulations |
| Status | Active |
| Latest development |
Analysis
Key Requirements
Mexico's Federal Law on the Development and Use of Artificial Intelligence establishes several key requirements:
- Risk-based classification system: AI systems are categorized as unacceptable, high-risk, or low/minimal risk. High-risk systems require assessment and human oversight testing before market introduction.
- Robust risk management: Developers and deployers of AI systems, especially those deemed high-risk, must implement effective risk management strategies and conduct thorough impact assessments.
- Algorithmic discrimination prevention: Companies are required to maintain detailed documentation aimed at preventing algorithmic discrimination.
- Incident reporting: Stakeholders must report any incidents involving risks or discrimination to the Department of Justice.
- Transparency and consumer notification: AI providers must inform users about their interaction with AI systems.
- Intellectual property protection: AI-generated content must be clearly labeled when registering for IP protection, and consent must be obtained from IP rights holders before using their data to train AI systems.
Compliance Challenges
Organizations face several challenges in complying with Mexico's AI regulations:
- Classifying AI risk levels: Determining whether an AI system falls into the high-risk category can be complex, as evidenced by similar challenges faced with the EU AI Act.
- Implementing effective oversight: Ensuring adequate human oversight for high-risk AI systems while maintaining efficiency can be challenging, as seen in other jurisdictions implementing AI regulations.
- Balancing innovation and compliance: Companies must navigate the tension between rapid AI development and regulatory compliance, which can slow down innovation processes.
- Cross-border data flows: Managing data protection requirements while enabling necessary data flows for AI development, similar to challenges faced under GDPR.
Implementation Best Practices
To effectively implement the requirements of Mexico's AI law:
- Conduct comprehensive AI audits: Regularly assess all AI systems to classify their risk levels and ensure compliance.
- Establish robust governance frameworks: Implement AI governance structures aligned with international standards like ISO/IEC 42001 for AI management systems.
- Enhance transparency measures: Develop clear policies outlining AI system interactions and ensure compliance with transparency requirements.
- Implement continuous monitoring: Use AI governance platforms like FairNow to ensure ongoing compliance and risk management.
- Invest in employee training: Provide comprehensive training on AI ethics, risk management, and compliance using resources like the IEEE AI Ethics Certification Program.
Recent Updates
As of February 2024, the Federal Law on the Development and Use of Artificial Intelligence is still a proposed bill:
- The legislation was introduced to the Senate of Mexico on February 28, 2024.
- The bill is currently under consideration, with no set implementation date announced yet.
- Stakeholders should monitor the Mexican Senate's official website for updates on the bill's progress and potential amendments.
Related Regulations
Mexico's AI law aligns with and is influenced by several international regulations:
- EU AI Act: The Mexican law closely mirrors the EU's risk-based approach to AI regulation.
- OECD AI Principles: Mexico's approach aligns with the OECD's guidelines for trustworthy AI.
- Mexican Data Protection Law: The new AI regulations will interact with existing data protection laws in Mexico, particularly regarding data use in AI systems.
Industry Impact
The proposed AI regulations are expected to have significant impacts across various industries:
- Technology sector: Companies will need to adapt their AI development processes to meet new compliance requirements, potentially slowing innovation but improving trust.
- Financial services: The regulations may affect AI use in credit scoring and fraud detection, requiring more transparent and explainable models.
- Healthcare: AI applications in diagnostics and treatment planning will need to adhere to stricter risk assessment and oversight requirements.
- Retail and e-commerce: Companies using AI for personalization and recommendation systems may need to revise their algorithms to prevent discrimination.
Sources
- Digital Policy Alert - Mexico AI Regulatory Framework
- PYMNTS - Mexico Strengthens AI Oversight
- Security Journal Americas - Mexico's AI Bill Compliance
- FairNow - Overview of Mexico's Proposed AI Bill
- MIT Technology Review - EU AI Act Overview
- Brookings - EU AI Act Analysis
- McKinsey - State of AI in 2023
- IAPP - AI Act and International Data Transfers
- NIST AI Risk Management Framework
- ISO/IEC 42001 Standard
- OECD AI Principles
- IEEE AI Ethics Certification Program
- Mexican Senate Official Website
- INAI - Mexican Data Protection Law
- Deloitte - Future of AI Regulation
- McKinsey - AI in Financial Services
- WHO - AI in Healthcare Ethics and Governance
- World Economic Forum - AI Regulation in Retail
Recent developments
- — Industry reaction is shifting toward compliance planning around transparency, audits, and labeling as new bills advance. The report says bipartisan interest is building around an AI Labeling Act and a broader federal governance framework, signaling continued pressure on developers and deployers.[4] (source)
- — President Trump signed an Executive Order on Promoting Advanced AI Innovation and Security. The order creates a voluntary pre-release government review framework for covered frontier models and directs agencies to develop classified benchmarks for advanced cyber capabilities.[1] (source)
- — The White House’s June AI order is described as a major shift toward structured federal engagement with frontier AI developers. The report says it has implications for critical infrastructure operators and emphasizes that the framework is voluntary, not a mandatory licensing regime.[4] (source)
- — A National Security Presidential Memorandum issued in June directs the national security enterprise to rapidly adopt AI across intelligence and warfighting domains. It also adds vendor-control and contract-accountability expectations that may affect defense contractors and technology firms.[4] (source)
- — The federal Take it Down Act took effect, making it illegal to knowingly publish or threaten to publish intimate images without consent, including AI-generated deepfakes. This is one of the clearest recent federal AI-related enforcement changes affecting platforms and content moderation.[2] (source)
- — The federal Protecting Consumers From Deceptive AI Act was introduced in Congress. The bill is part of a broader federal push toward disclosure and consumer-protection rules for AI-generated or AI-assisted content.[2] (source)
- — California’s AB 2013 took effect, requiring developers of generative AI systems or services to post documentation about the data used to train their systems. The law increases transparency obligations for AI developers operating in the U.S. market.[2] (source)
- — California’s SB 942 also took effect, requiring covered providers to include latent disclosure in AI-generated images, videos, and audio content. The rule adds provenance-labeling requirements that may influence industry disclosure practices nationwide.[2] (source)
- — California’s Transparency in Frontier AI Act (SB 53) became effective after being signed in September 2025. It imposes frontier-developer reporting, risk-framework, and whistleblower-protection obligations, making California a leading state for frontier-model regulation.[3] (source)
- — The federal government is described as moving toward a more deregulatory AI policy while also pursuing challenges to state AI laws. Baker Botts says the administration has created a task force to identify state laws viewed as inconsistent with the federal framework.[3] (source)
- — White House issues Executive Order "Ensuring a National Policy Framework for Artificial Intelligence," directing Commerce to evaluate state AI laws within 90 days, creating a DOJ AI Litigation Task Force to challenge conflicting state laws, and instructing agencies like FCC and FTC to pursue preemption strategies[2] (source)
Read the full guide to Federal Law on the Development and Use of Artificial Intelligence
Related regulations
- Internet Information Service Algorithmic Recommendation Management Provisions — China, Active
- National Artificial Intelligence Policy Bill — Chile, Active
- Artificial Intelligence Liability Directive — European Union, Active
- Presidential Regulation on the Framework for Artificial Intelligence Development — Indonesia, Active
- Law Establishing the Framework for the Development and Use of Artificial Intelligence — Peru, Active
- California Consumer Privacy Act AI Amendments — California, Active, effective 2020-01-01
- GPAI Framework for Responsible AI — AI Regulations, Active
- Texas Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149) — Texas, Active, effective 2026-01-01
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates