What is the LFPDPPP DSAR deadline?

Under Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), the standard response deadline is 20 days. The counting method is business days, starting from the day of receipt.

Who enforces LFPDPPP?

LFPDPPP is enforced by Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Maximum penalties: Up to 320,000 times the daily minimum wage (UMA); doubled for sensitive data violations.

🇲🇽LFPDPPP

Mexico — LFPDPPP DSAR Deadline Calculator

Q: Can I extend a LFPDPPP deadline?

No. LFPDPPP does not provide for deadline extensions under standard circumstances.

Calculate your exact response deadline under Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

LFPDPPP Overview

Full Name

Ley Federal de Protección de Datos Personales en Posesión de los Particulares

Effective Since

2010-07-06

Regulatory Authority

Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)

Official Text

View law

Maximum Penalties

Up to 320,000 times the daily minimum wage (UMA); doubled for sensitive data violations

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access (Acceso) Right to know what personal data is held and how it is processed	20 days	Not available
Right to Rectification (Rectificación) Right to request correction of inaccurate or incomplete data	20 days	Not available
Right to Cancellation (Cancelación) Right to request deletion of personal data	20 days	Not available
Right to Object (Oposición) Right to oppose the processing of personal data	20 days	Not available

Extension Rules

LFPDPPP does not provide for deadline extensions under standard circumstances.

Special Rules & Common Mistakes

•Must respond within 20 business days of receiving the ARCO request
•Known as ARCO rights (Acceso, Rectificación, Cancelación, Oposición)
•If the response is positive, it must be implemented within 15 business days after communication
•No formal extension mechanism under LFPDPPP
•INAI is the authority for private sector; INAI also handles public sector requests
•Data subject must first exercise rights directly with the data controller before filing with INAI

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇲🇽 Mexico LFPDPPP	20 days	business days	No
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days