Worker monitoring in Mexico: related rules

Telework policy with data protection

When it relates

If you have staff teleworking more than 40% of their time and use work monitoring or management tools, including AI-based ones.

What the rule provides

• Have a telework policy with data protection and information security rules.
• Tell teleworkers which supervision mechanisms are used and respect their privacy and right to disconnect.
• Keep the list of teleworkers.

Typical evidence

• Signed and communicated telework policy.
• List of teleworkers.

Supporting documents

• Data Governance Guidelines for AI
• AI Security Baseline
• Responsible AI Use Policy (Including Generative AI)

Verification

Verified in the official source on November 4, 2026Checked in the DOF: item 5.1 (up-to-date list of remote workers), 5.2 (written telework policy, with monitoring mechanisms that respect privacy and disconnection), 6.6 (employer's data protection policies) and Appendix 1 (informative). Effective 180 calendar days after publication (Dec 5, 2023). Fines come from the Federal Labor Law per secondary sources. It is not an AI rule; it is included because it calls for data protection rules in remote work, where AI and monitoring tools are common.