Home / Blog / How to Delete Personal Data with the INAI in Mexico
Data removal

How to Delete Personal Data with the INAI in Mexico

2025-11-075 min read

Deleting personal data in Mexico is a right backed by law, but exercising it correctly can be a challenge. If a company, institution or platform keeps your information without consent, you can request its removal through the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), the competent authority in this field.

However, the legal process can present complexities that require technical and legal knowledge. At World Delete, we have specialists in proceedings before the INAI, committed to protecting your personal information and ensuring that your rights are exercised effectively and in accordance with current regulations.

What Is the INAI and What Is Its Role?

The INAI is the autonomous body responsible for guaranteeing that your rights over personal data are respected in Mexico. Its main task is to ensure that anyone can exercise the rights of access, rectification, cancellation and opposition (ARCO) against those who handle their information.

If a company or institution refuses to delete your data or does not respond appropriately, you can request the INAI's intervention through a formal procedure. This process requires clear documentation, knowledge of the deadlines set by law and a well-founded legal justification for your request to succeed.

ARCO Rights: Your Legal Shield

ARCO rights are the foundation of data protection in Mexico:
  • Access: Find out what personal data they hold about you
  • Rectification: Correct inaccurate or outdated information
  • Cancellation: Request the deletion of your data
  • Opposition: Refuse the processing of your data for certain purposes
The right of cancellation is the one that allows you to delete personal data, but exercising it correctly requires following specific procedures that many people are unaware of.

General Steps to Delete Personal Data

1. Direct Request to the Controller

The first step is always to submit a formal request to the company or organization that holds your data. This request must include:
  • Your official identification
  • A clear description of the data to be deleted
  • The legal basis for your request
  • Your preferred method for receiving a response
The organization has 20 business days to respond, although technical and legal complexities may extend the process.

2. Follow-Up and Documentation

It is crucial to keep a detailed record of all communications. Many requests fail due to a lack of adequate documentary evidence or failure to meet specific formal requirements.

3. Proceedings Before the INAI

If the response is negative or there is no response, you can initiate a rights protection procedure before the INAI. This is where the complexity increases significantly:
  • You must submit specific documentation
  • Argue legally why the cancellation is appropriate
  • Know the legal exceptions that might apply
  • Follow strict procedural deadlines

Why Do You Need Professional Help?

Although the law in Mexico guarantees the right to delete personal data, exercising it correctly is not always simple. There are several factors that can complicate the process and reduce the chances of success if not handled carefully.

1. Technical and legal complexity Many companies have legal teams that are well aware of the exceptions that allow them to retain certain data, such as tax obligations, current contracts or specific regulations.

2. Legal exceptions Not all information can be deleted. The law states that data must be retained when:

  • There is a legal obligation to keep it
  • It is necessary to fulfill a contract
  • It is required for tax or accounting matters
  • There are legal proceedings underway
Determining whether your case falls under any of these exceptions requires detailed legal analysis.

3. Risks of a poorly submitted request An error in the form or content of your request can:

  • Cause its immediate rejection
  • Trigger legal deadlines against you
  • Alert the company to strengthen its defense
  • Make it harder to achieve the deletion of the data
At World Delete, we have certified specialists in proceedings before the INAI. We know how to submit well-founded requests, anticipate objections and support you throughout the process to protect your personal information effectively.

Common Mistakes When Trying to Delete Data

Failing to Identify the Correct Controller

In cases of data published across multiple platforms, it is essential to identify who is the original controller of the processing. Addressing the wrong recipient can result in the loss of valuable time.

Generic or Vague Requests

Asking to "delete all my data" without specifying what information, where it is hosted or what the specific legal basis is usually results in justified refusals.

Being Unaware of Procedural Deadlines

The INAI works with strict deadlines. Missing a deadline can mean losing your right to challenge a refusal or to submit additional evidence.

Not Considering the International Scope

If your data is on international servers or the company has a presence outside Mexico, the procedure may require additional actions that go beyond the INAI's jurisdiction.

The Value of Professional Experience

At World Delete, we have handled hundreds of personal data deletion cases before the INAI. Our experience allows us to:
  • Assess the real viability of your case before initiating proceedings
  • Design tailored strategies based on the type of data and controller
  • Manage all the necessary documentation with legal precision
  • Represent you before the INAI if it becomes necessary to reach that stage
  • Guarantee follow-up until your data is effectively deleted
It is not just about submitting a request, but about ensuring that your data is effectively deleted and does not reappear in the future.

Special Cases That Require Expert Attention

Data on Digital Platforms

Google, social networks and websites have specific procedures that must be integrated with Mexican legislation. Coordinating requests to these platforms with proceedings before the INAI requires specialized knowledge.

Information in Credit Bureaus

Credit bureaus have particular regulations. Although the INAI has jurisdiction, there are parallel proceedings before Condusef that must be considered strategically.

Sensitive Data

Medical, biometric or ethnic origin information has special protections. Its deletion follows stricter protocols than general data.

Protect Your Data with Experts

Deleting personal data in Mexico is a right, but exercising it effectively requires specialized legal knowledge, experience in administrative proceedings and a professional strategy. An error in the process can permanently compromise your privacy.

At World Delete, we specialize in data protection and online reputation management. Our team of experts has in-depth knowledge of proceedings before the INAI and can help you exercise your rights effectively and securely.

Contact our experts at World Delete and receive personalized advice for your case.

We will assess your situation with no obligation and offer you the best strategy to protect your personal information.

Ready to clean up your online presence?

Our team reviews your case for free and tells you exactly what can be removed and how.

Start free analysis