Mexico has formally mandated the use of a new biometric-based digital ID system, making compulsory a previously voluntary identification mechanism known as the Unique Population Registry Code, or CURP.
Under the new law, CURP IDs will now incorporate detailed personal biometric records, including fingerprints, iris scans, and photographs embedded within a QR code.
The government plans a phased rollout, expecting full nationwide adoption by February 2026.
Historically, CURP codes facilitated everyday interactions such as filing taxes, registering companies, school enrollments, and applying for passports.
Accompanying this shift is a broader initiative to consolidate multiple government databases into a single Unified Identity Platform. Within 90 days, the Ministry of the Interior and the Digital Transformation Agency must launch the unified platform, which will be integrated into various public and private institutions’ databases.
Additionally, a separate program aimed at systematically collecting biometric data from minors is slated to commence within 120 days.
Despite the obvious privacy concerns, Mexican authorities argue that existing privacy legislation already sufficiently guards against unauthorized surveillance or misuse of sensitive data.
President Claudia Sheinbaum responded to privacy concerns earlier this month, clarifying, “A wiretap can only be approved by a judge, according to the Constitution and the law,” though that doesn’t placate concerns about data breaches and the wider introduction of a checkpoint society.
