Law / Mexico

Ley Federal del Derecho de Autor, Technological Protection Measures and Circumvention (Arts. 114 Bis, 232 Bis)

Ley Federal del Derecho de Autor (LFDA) arts. 114 Bis y 232 Bis, adicionados por decreto publicado en el Diario Oficial de la Federación el 1 de julio de 2020

In force since .

A computer misuse rule binding public and private bodies.

Obligation class
Access restriction
Audit expectation
none

What it requires

  • Do not circumvent, or supply a device, mechanism, product, component, or system designed, marketed, or predominantly used to circumvent, a technological protection measure that controls access to a copyrighted work.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
NIST AI 600-1
OWASP LLM Top 10
OWASP Agentic Top 10
  • ASI03Identity and Privilege Abuse
MIT mitigations Draft
  • 2.1Model & Infrastructure Security
  • 3.2Data Governance
FINOS AIGF
ETSI EN 304 223
  • 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

What it makes you log

Logging duty

Article 114 Bis allows effective technological protection measures and rights-management information and defines both; article 232 Bis fines the trade in circumvention devices and services. Neither requires anyone to keep a log or record; rights-management information is data attached to a work, not a record the user keeps. No territorial test is stated in these articles, so the hook is empty.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 114 Bis lets a copyright or related-right holder implement an effective technological protection measure, defined as any technology, device, or component that, in the normal course of its operation, protects the right or controls access to a work, performance, or phonogram, and lets rights-management information be attached to a work.

Article 232 Bis fines, from 1,000 to 20,000 times the Unidad de Medida y Actualización (UMA), anyone who produces, reproduces, manufactures, distributes, imports, markets, leases, stores, transports, offers, makes available, or otherwise supplies a device, mechanism, product, component, or system that is promoted, marketed, or advertised for the purpose of circumventing an effective technological protection measure; is used predominantly for that purpose; or is designed, produced, or executed for that purpose.

Neither article names crawling, scraping, or a bot as such; Article 232 Bis's prohibition runs against trafficking in a device or service designed to circumvent, and a separate provision, Article 232 Ter, fines the act of circumventing a technological protection measure that controls access to a copyrighted work, regardless of the collection method used afterward.

When LexLint raises it

When your app profile says your app crawls the web or trains models.

Back to the example  ·  Lint your app

Page updated .