Duty LXD-6797
Handles health records, in Mexico
Ley Federal de Protección de Datos Personales en Posesión de los Particulares, sensitive personal datasince 3 lines
LFPDPPP, arts. 2(VI), 8 and 12 (sensitive personal data) · Read the law's page
- Obtain the data subject's express, written consent, by autograph signature, electronic signature, or another authentication mechanism, before processing their sensitive personal data, unless a statutory exception applies.
- Do not create a database of sensitive personal data unless its creation serves a legitimate, specific purpose consistent with your explicit activities or aims.
- Make reasonable efforts to limit the period you process sensitive personal data to the minimum indispensable for the purpose.