The Mexican data protection authority, Instituto Federal de Acceso a la Información y Protección de Datos (IFAI) has imposed a fine on Banamex, the Mexican division of Citibank, of 16,155,000 MXN, approximately €1m or $US 1.3m. A data subject had sent a letter requesting Banamex to cease processing his/her personal data; however the company failed to comply. Following this, the Director General of Substantiation and Sanction wrote a letter to Banamex following a complaint from the data subject; however the company did not comply within the 10 days accorded to them. The IFAI further announced fines of approximately €130,000 ($US 170,300) against Mexican bank Caja Popular Cristo Rey and approximately €76,300 ($US 100,000) against fitness club Sport City. There is an opportunity for the companies to appeal the fines. The increase in enforcement follows Mexico’s acceptance as the second formal participant of the Asia-Pacific Economic Cooperation Cross Border Privacy Rules System.
Read more
