In Mexico, must owners of PII offer individuals any degree of choice or control over the use of their information? The law provides individuals with ‘ARCO’ rights: to access (the right to know what information is being held and handled by the PII controller); rectify (the right to request at any time that the PII controller correct the PII that is incorrect or inaccurate); cancel (the right to request the PII controller to stop treating their PII); or oppose (the right to refuse) the processing of their PII. What else do companies who conduct business in Mexico need to know about personal data handling and processing in Mexico?
