Cybersecurity 2026

MEXICO Law and Practice Contributed by: Alejandro Mendiola Diaz and Gunter A. Schwandt G, Nader Hayaux & Goebel

diagnoses, treatment plans, laboratory tests, and progress notes. Specific documentation is required for hospitalisation, surgeries, emergency care, and specialised treatments. • Confidentiality and patient rights – Medical records are confidential and can only be accessed by authorised personnel or with patient consent, except in cases required by law. Patients have the right to access their records and request correc - tions. • Retention and storage – Medical records must be kept for at least five years after the last patient interaction. Digital and physical records must fol - low security and data protection protocols. • Legal and ethical responsibilities – Healthcare professionals are responsible for accurate, com - plete, and timely documentation. Institutions must implement internal policies to ensure compliance with the standard.

255 CHAMBERS.COM

Powered by