IFAI Shows Teeth with $1m Fine on Bank
A data subject had sent a letter requesting Banamex to cease processing his|her personal data, however the company failed to comply. Following this, the Director General of Substantiation and Sanction wrote a letter to Banamex following a complaint from the data subject, however the company did not comply within the 10 days accorded to them.
The IFAI further announced fines of approximately $US 170,300 against Mexican bank Caja Popular Cristo Rey and approximately $US 100,000 against fitness club Sport City. There is an opportunity for the companies to appeal the fines. The increase in enforcement follows Mexico's acceptance as the second formal participant of the Asia-Pacific Economic Cooperation Cross Border Privacy Rules System.