Is my health data safe abroad?

Is my health data safe in Mexico?

In Mexico, your file stays with the clinic and you are entitled to a summary. Ask for your clinical summary and scans before you leave, and keep your own copy on your phone.

General information, checked against the law on 23 September 2026. For your own case, ask a lawyer in Mexico.

What the law says

How Mexico treats your health data.

The law
The Federal Law on the Protection of Personal Data Held by Private Parties, rewritten in March 2025. It treats health data as sensitive data.[S124]
The regulator
Secretariat of Anti-Corruption and Good Governance, which took over data protection from the former INAI in 2025[S124][S125]
Health data
A clinic needs your express consent to use your health data. The law makes room for emergencies, when you are unable to give consent and the person treating you is bound by professional secrecy.[S124]
Sending it abroad
Sharing your data with someone else, in Mexico or abroad, needs your consent. The law allows it without consent when your diagnosis, treatment or health care needs it.[S124]
Medical records
Clinics keep your file for at least 5 years after your last treatment. The file belongs to the clinic, and you are entitled to a clinical summary of it.[S126]
EU adequacy
No. Mexico is absent from the European Commission's adequacy list, so an EU organisation sending data there needs other safeguards.[S77]
If there is a breach
Immediately, to the people affected, when the breach significantly affects their rights.[S124]
Fines
Fines of up to 320,000 UMA, Mexico's official unit for fines, which can double when health or other sensitive data is involved.[S124]

Moving or living there

Moving to Mexico, or living there.

Do I need a medical exam for Mexican residency?

The consulate's list for a temporary resident visa asks for the application form, your passport, a photo and proof of income or savings, with no medical exam. Mexico's national HIV standard also rules out HIV tests as a condition for entering or leaving the country.[S127][S128]

Can my employer in Mexico ask for my medical history?

Mexico's HIV standard rules out HIV tests as a condition of employment, and the Federal Labour Law bans asking for a pregnancy certificate to hire or promote you. Your clinic file stays confidential to the staff treating you, you, and judicial or health authorities.[S128][S129][S126]

Will a pre-existing condition affect my private health insurance in Mexico?

Usually, yes. Mexico's financial consumer agency says a condition diagnosed before the policy starts is generally excluded from cover. Answer the insurer's health questionnaire in full: by law, a missing or inaccurate answer lets the insurer cancel the policy, even for an unrelated claim.[S131][S130]

Can I join IMSS, Mexico's public health system, as a foreign resident?

Residents can enrol voluntarily in the IMSS Family Health Insurance. Some pre-existing conditions prevent enrolment, some conditions have waiting periods, and some treatments are excluded, so read the list before you apply.[S132]

Travelling for treatment

Coming to Mexico for treatment.

Will a clinic in Tijuana tell my doctor or insurer back home?

Only with your consent, or when your own care needs it. Mexican law treats health data as sensitive and requires consent to share it, with exceptions for diagnosis and treatment. If you pay the clinic yourself, no insurer is involved.[S124]

Are dental clinics in Los Algodones private?

The same rules apply to every clinic in Mexico, including small private practices: your file is confidential, kept for at least 5 years, and open to the staff treating you, you, and the authorities the law names.[S126]

Can I get my medical records from a clinic in Mexico?

Yes. The file belongs to the clinic, and you are entitled to a clinical summary with your diagnosis, treatment, progress and test results. Ask for it, with copies of your scans, before you fly home.[S126]

Sending your records

The law protects the clinic’s copy. How it gets there is up to you.

Email and messaging apps leave a readable copy on every server they pass through, in Mexico and at home. The safest file is the one that stays encrypted on your own phone, shown to the doctor in the room or sent by a link that expires by itself.

Questions

Mexico: common questions.

Is it safe to email medical records to a clinic in Mexico?

Email is protected between mail servers only when both providers support TLS, and it stays readable on each server afterwards. Once your records reach a clinic in Mexico, local law applies: a clinic needs your express consent to use your health data. The law makes room for emergencies, when you are unable to give consent and the person treating you is bound by professional secrecy. For a full history, use a channel where you hold the key, such as a link that expires by itself.

Are my medical records private in Mexico?

A clinic needs your express consent to use your health data. The law makes room for emergencies, when you are unable to give consent and the person treating you is bound by professional secrecy. Breaches must be reported immediately, to the people affected, when the breach significantly affects their rights. The regulator is the Secretariat of Anti-Corruption and Good Governance, which took over data protection from the former INAI in 2025.

Can a clinic in Mexico send my medical records abroad?

Sharing your data with someone else, in Mexico or abroad, needs your consent. The law allows it without consent when your diagnosis, treatment or health care needs it. Clinics keep your file for at least 5 years after your last treatment. The file belongs to the clinic, and you are entitled to a clinical summary of it.