Technology, data and AI, advised from the inside.
Data protection under Mexico’s new LFPDPPP, intellectual property, platform terms and AI work structures. The practice is led by Víctor Durán, with more than five years as in-house counsel at a Fortune 50 technology multinational.
Three digital fronts, one team.
Startups and SaaS
Your product collects data and signs terms every day. We bring the notice, the contracts and the policies up to date.
Companies adopting AI
You are bringing AI into the workflow. We define usage rules, vendor review and what the team can do with client data.
Growing brands
Name, logo and content: registration before IMPI and basic defense of your identity.
From the privacy notice to the AI policy.
Data protection
Privacy notice, data mapping, processor agreements and handling of ARCO rights under the current LFPDPPP.
Artificial intelligence
Internal AI usage policies, vendor terms review and AI clauses in client contracts.
Intellectual property
Trademark registration before IMPI, assignments of rights and protection of content and software.
Terms and platforms
Terms and conditions, privacy policies and SaaS contracts, in Spanish and English.
Data at work
Monitoring, AI tools and employee data, aligned with the firm’s labor practice.
Incidents
Response to data security breaches: containment, analysis of obligations and the notifications the Law requires.
Prices on the table.
Data protection (LFPDPPP)
Privacy notice and compliance for your site and your app.
Trademark registration (IMPI)
Protect your name and your logo from day one.
Your on-call lawyer
Your legal department for a monthly fee, with data, terms and AI covered in the routine.
Reference prices in Mexican pesos, plus VAT. The final fee is set in writing based on the scope of each case.
Current as of August 2026
The facts worth keeping in sight.
Publication date in the DOF of the new LFPDPPP, in force since the following day and amended on November 14, 2025. If your privacy notice predates it, it needs review.
The Ministry for Anticorruption and Good Government (Secretaría Anticorrupción y Buen Gobierno) is the data protection authority since INAI was dissolved; proceedings and inspections now run through it.
Cap on fines for breaches of the Law, which can double when sensitive data is involved. At the 2026 UMA of $117.31, the base cap exceeds $37.5 million pesos.
Access, rectification, cancellation and opposition: the rights any data subject can exercise before your company. You need a channel to receive them and deadlines to respond.
Law published in the DOF on March 20, 2025 · Figures at the 2026 UMA
Five years on the client side, now on yours.
Víctor Durán
Partner · Corporate, labor and technology
More than five years as in-house counsel at a Fortune 50 technology multinational, advising on everything from labor to corporate and administrative matters. Sitting on the client side taught him what a business really needs: clear options, measured risk and knowing the cost before the work starts. He leads every client relationship at the firm, and his practice includes representation in conciliation hearings and trials.
Why it matters
The person reviewing your terms, your data and your AI has already sat on the other side of the table: he knows how product, procurement and legal teams at a large tech company think, and what can actually be negotiated.
Data, AI and trademarks, in short.
What changed with the new LFPDPPP?+
It was published on March 20, 2025 and repealed the 2010 law. INAI disappeared and the authority is now the Ministry for Anticorruption and Good Government; sanctions are calculated in UMA. If your notices and contracts cite INAI or the old law, they need updating.
Does my site need a privacy notice?+
Yes, from the first piece of data you collect, even a contact form. Without a notice, the processing is sanctionable. We draft it and leave it published from $8,000 MXN plus VAT.
Can I use AI with my clients’ data?+
It depends on your notice, your contracts and the AI vendor. The short rule: do not upload personal data to tools without a contract and safeguards in place. We build the internal policy so the team knows what is allowed and what is not.
What does a trademark registration protect?+
Your name and your logo in the classes of goods or services you register, for renewable 10 year periods. Before investing in advertising, register; the filing starts from $6,500 MXN plus VAT plus official fees.
What do I do if there is a data breach?+
Contain, document and assess the duty to notify under the Law. The order of the first hours matters a lot; it pays to have a protocol before the incident, and we leave one in place.
How much does it cost to get my company current?+
Data protection from $8,000, trademark from $6,500 plus official fees, and the rest is defined in writing after a short diagnosis of what you collect and what you sign.
Shall we review your data, your AI and your brand?
Tell us what your product collects and what tools your team uses. We reply with the diagnosis and the fee in writing, within 24 hours.