The federal law on personal data protection in Mexico establishes regulations for companies holding personal data. It aims to protect individual privacy rights and ensure lawful use of personal data. The key rights covered include access, rectification, cancellation and opposition by data owners. Companies must classify data, appoint a privacy officer, obtain authorization for sensitive data use, and notify data transfers. Non-compliance can result in warnings, fines up to $17.8 million MXN, or jail time up to 10 years.