State of Mexico approves Transparencia Mexiquense

Update August 23, 2026: The Congress of the State of Mexico has approved the creation of Transparencia Mexiquense to replace INFOEM, along with two new laws and amendments to five state statutes. At the federal level, the Cybersecurity Law initiative remains in committee, and the Artificial Intelligence proposal was not put to a Senate floor vote.

The Congress of the State of Mexico approved the creation of Transparencia Mexiquense as the new body responsible for public access to information and personal data protection, replacing INFOEM. Lawmakers also approved two new laws in the area and reforms to five state statutes. In Mexico City, a reform on digital violence against women is moving forward, while at the federal level the Cybersecurity Law and the General Artificial Intelligence bill remain pending.

What did the Congress of the State of Mexico decide?

The state legislature approved Transparencia Mexiquense and advanced new transparency and data protection laws, formalizing the extinction of INFOEM and transferring its functions to an entity attached to the state Comptroller's Office.

According to local coverage, the approval includes two new laws in the field and amendments to five state statutes. The new body will serve as the guarantor for the executive branch and municipalities, while requests addressed to the judiciary and the legislature will remain under their own internal oversight offices.

United committees in the Congress of the State of Mexico had already reviewed a bill sent by the governor that, among other points, proposed creating a new specialized personal data protection law, amending the Organic Law of the Public Administration, the Archives Law, the Anti-Corruption System Law, and several administrative and financial codes. It also proposed making Transparencia Mexiquense a deconcentrated administrative body of the Comptroller's Office, with technical and operational autonomy.

What happened to INFOEM and who will absorb its functions?

INFOEM's functions will move to Transparencia Mexiquense and internal control bodies, in a structure under the state Executive branch's Comptroller's Office.

Regional coverage had anticipated that more than 90% of the requests now handled by INFOEM would move to the new model led by Transparencia Mexiquense, while the rest would be divided among other branches and internal control bodies. During committee review, state officials said transparency units will continue to exist in each obligated entity.

El Universal Edomex reported that the united committees approved Governor Delfina Gómez Álvarez's initiative so INFOEM's powers can be absorbed by Transparencia Mexiquense and the internal control bodies. The proposal is for the new body to function as a deconcentrated agency within the Comptroller's Office, with technical and operational autonomy, but still inside the state structure.

What political objections did the reform raise?

The opposition in the State of Mexico argued that dissolving INFOEM would weaken independence in transparency and data protection, warning that the new model increases state administration control.

The PRI in the State of Mexico came out against the proposal and said the model would weaken the independence of the institutions responsible for guaranteeing these rights. Local lawmakers also rejected eliminating INFOEM, arguing that Transparencia Mexiquense would give the state administration greater control over transparency and data protection.

Coverage from OEM and El Sol de Toluca also included criticism from lawmakers about the independence of the new body and the budgetary and administrative challenges involved in replacing a constitutional autonomous body with an entity attached to the Executive branch.

How would information request deadlines change?

The draft new Transparency Law in the State of Mexico would extend response times for information requests and could also delay the resolution of appeals.

According to Marcaje Legislativo, the standard deadline would increase from 15 to 20 business days, with a possible extension from 7 to 10 business days. In practice, that could push responses to as long as 30 business days and stretch appeals to as long as two months, marking a substantial change in the transparency obligations of obligated entities.

What other initiatives are advancing in Mexico?

Mexico City is reviewing a reform to update the definition of digital violence and authorize the Public Prosecutor's Office to immediately order the removal, blocking, destruction, or deletion of digital content tied to reported incidents.

The initiative was introduced by Morena lawmaker Brenda Fabiola Ruiz Aguilar before the Permanent Commission and then sent to the Mexico City Congress' Gender Equality Committee. Lawmaker Ángel Augusto Tamariz Sánchez joined the proposal, according to coverage by La Crónica de Hoy.

At the federal level, the Cybersecurity Law initiative presented to the Senate on April 30, 2025, remains in committee, without being reported out, voted on by the full chamber, approved by the Chamber of Deputies, or published in the Official Gazette of the Federation. An independent tracking effort places the first real political window for a vote starting September 1, 2026.

There is also a General Artificial Intelligence bill in the Senate that remains in committee and has no specific law approved on the matter. A later report said the planned floor vote on February 25, 2026, did not take place, so the bill was not approved by the full chamber.

The Chamber of Deputies, meanwhile, still has pending several initiatives related to cybercrime and the improper use of artificial intelligence, including a draft decree to add a chapter to the Federal Penal Code called "Theft and digital identity theft and extortionate digital violence," filed in July 2026 by lawmaker Marcelo Torres Cofiño (PAN) and referred to the Justice Committee.

In addition, a regional tracking report on data protection and artificial intelligence notes that Mexico has had a new Federal Law on the Protection of Personal Data Held by Private Parties since February 2025, and a General Law on the Protection of Personal Data Held by Obligated Entities, in force since March 21, 2025, which reshape the oversight and compliance framework in the area.