Mexico: INAI issues statement on privacy of Coronavirus patients
The National Institute for Transparency, Access to Information and Personal Data Protection ('INAI') released, on 2 April 2020, a statement ('the Statement') calling on extreme precautions with the personal data of patients diagnosed with COVID-19 ('Coronavirus'). In particular, the Statement reminds those who handle such personal data to use strict administrative, physical, and technical safeguards to avoid any loss, destruction, theft, or improper use, and urges them to comply with the principles, duties, and obligations established in Mexico's current personal data protection laws. Furthermore, the Statement recommends that, among other things, specific measures are implemented in response to Coronavirus, only minimum necessary personal data can be collected, and the personal data collected to prevent or contain the spread of Coronavirus should not be used for other purposes. In addition, the Statement communicates that the processing of personal data before the Coronavirus must be informed and the owner must, at all times, be informed of the purpose for which their data is being collected and processed.
You can read the Statement here.