Data Protection and Privacy 2026

MEXICO Law and Practice Contributed by: Luciano Pérez and Allan Pastor, Nader Hayaux & Goebel

Nader Hayaux & Goebel is a leading full-service Mexican law firm with 22 partners and more than 40 associates. Its Data Privacy & Cybersecurity practice is led by one partner and supported by two associ - ates, advising Mexican and foreign companies, both regulated and non-regulated, on compliance with Mexican data protection regulations and financial se - crecy requirements. Based in Mexico City and sup - ported by the firm’s London office, the team stands out for its extensive experience in international and cross-border data privacy and cybersecurity matters, including the implementation in Mexico of foreign

regulations such as the GDPR. The practice provides comprehensive advice on privacy compliance, risk prevention and management, data breach response, biometric data processing and training programmes. Recent work includes advising a global videogame company on GDPR implementation, assisting inter - national insurance companies with privacy notices and integrated compliance strategies, supporting a major e-commerce company on biometric data com - pliance, and conducting data privacy and financial secrecy audits for an insurance broker of a large au - tomotive group. Allan Pastor is an associate at Nader, Hayaux & Goebel specialising in antitrust, compliance and data protection matters. He holds a law degree from Tecnológico de Monterrey and a diploma in Economic Competition from Universidad Panamericana and the International Chamber of Commerce. His practice focuses on data protection compliance, regulatory risk management, and interactions with Mexican authorities. Allan has significant experience advising on data privacy compliance frameworks, including overseeing the internal data protection compliance system of one of Mexico’s largest companies and representing matters before the national data protection authority. He has also been involved in merger notifications, investigations and formal proceedings before Mexico’s antitrust authority. In addition, Allan regularly conducts internal compliance investigations for multinational companies, covering issues such as corruption, bribery, fraud and workplace misconduct, and participates in corporate compliance and regulatory audits, strengthening organisations’ governance and risk management structures.

Authors

Luciano Pérez is a partner at Nader, Hayaux & Goebel with more than 25 years of experience and is a core member of the firm’s Corporate/M&A, Banking & Finance and Compliance practices, with a strong focus on data protection and regulatory matters. His expertise includes data privacy and cybersecurity compliance, financial secrecy, regulated M&A and regulatory frameworks applicable to insurance, reinsurance, fintech and insurtech companies. He regularly advises Mexican and international clients on the implementation of cross-border data protection strategies, including GDPR-related compliance in Mexico, drafting and implementation of privacy notices, intragroup data transfer agreements, and integrated compliance and risk management frameworks. Luciano also has significant experience advising regulated entities on governance and compliance matters and serves as independent board member and secretary for insurance companies. He obtained his law degree from Universidad Iberoamericana and an LL.M. from Erasmus University Rotterdam, and he previously worked as a foreign associate in the banking and finance practice of Mayer Brown in Chicago. He is an active member of AMEDESEF (Mexican Chapter of AIDA), ANADE and ICC Mexico.

310 CHAMBERS.COM

Powered by