Criminal framework

Ley Olimpia (federal reform of 2021 to the Código Penal Federal article 199 Octies and the General Law of Women's Access to a Life Free of Violence), plus state level implementations. The statute was enacted Federal 2021 (state level since 2018). From 3 to 6 years imprisonment plus fine of 500 to 1000 days minimum wage units under federal article 199 Octies. State penalties vary.

Civil and data protection framework

Ley Federal de Protección de Datos Personales en Posesión de los Particulares (rights of access, rectification, cancellation, opposition) provides the parallel civil route. Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) is the national supervisory authority and accepts complaints against any controller processing intimate imagery without lawful basis. The official site is https://home.inai.org.mx.

Official victim support

Frente Nacional para la Sororidad is the recognised support service. Available at https://www.frentesororidad.org.

Five step removal process for Mexico victims

  1. 1

    Preserve evidence before any contact with the perpetrator

    Capture full page screenshots with URLs visible. Save the original files. Note timestamps. This evidence supports both the Ley Olimpia complaint and any Ley Federal de Protección de Datos Personales en Posesión de los Particulares (rights of access, rectification, cancellation, opposition) request.

  2. 2

    File a criminal complaint under Ley Olimpia

    Report to local police or the national cybercrime unit. Frente Nacional para la Sororidad can assist with the report.

  3. 3

    Submit an erasure request under Ley Federal de Protección de Datos Personales en Posesión de los Particulares (rights of access, rectification, cancellation, opposition)

    Send a written request to each platform's designated data protection contact citing the legal basis. INAI can be petitioned if the platform fails to comply within 30 days.

  4. 4

    Send a US TAKE IT DOWN Act notice in parallel for covered platforms

    When the platform is subject to US jurisdiction, the 48 hour federal removal obligation applies in parallel with your domestic rights. ScanErase files these notices automatically.

  5. 5

    Track and escalate non compliant platforms

    Document every notice and every response. Escalate non compliant platforms through the regulator complaint process.

Frequently asked questions

What is the criminal NCII statute in Mexico?

Ley Olimpia (federal reform of 2021 to the Código Penal Federal article 199 Octies and the General Law of Women's Access to a Life Free of Violence), plus state level implementations. Enacted Federal 2021 (state level since 2018). From 3 to 6 years imprisonment plus fine of 500 to 1000 days minimum wage units under federal article 199 Octies. State penalties vary.

Who enforces data protection rights in Mexico?

Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) is the national authority. Official site: https://home.inai.org.mx.

Is there an official victim support service in Mexico?

Yes. Frente Nacional para la Sororidad provides direct help to victims. Site: https://www.frentesororidad.org.

Can a Mexico resident also use the US TAKE IT DOWN Act?

Yes when the hosting platform is subject to US jurisdiction. The TAKE IT DOWN Act applies to covered platforms regardless of where the victim resides. ScanErase's scan finds every US covered platform hosting your images, so you can file notices there in parallel with Ley Federal de Protección de Datos Personales en Posesión de los Particulares (rights of access, rectification, cancellation, opposition) requests.

Related guides