Cumplimiento e implementación de marcos normativos (compliance) en materia de protección de datos personales y privacidad

Aseguramos el cumplimiento de las normativas vigentes en materia de privacidad, protección de datos y ciberseguridad de empresas y organizaciones, en su vinculación con la utilización de tecnologías disruptivas como la Inteligencia Artificial (IA) o el Internet de las Cosas (IoT), a través, entre otros, de los siguientes instrumentos:

  1. Diagnóstico de cumplimiento: Revisamos y evaluamos el nivel de cumplimiento para determinar posibles brechas entre las prácticas actuales, de empresas y organizaciones, con relación a lo previsto por los marcos legales.
  2. Evaluación de impacto a la privacidad (PIA por sus siglas en Inglés): Identificamos en etapas tempranas (en el diseño o construcción de proyectos)  vulnerabilidades y riesgos específicos en el tratamiento de datos (incluido aquellos que utilicen inteligencia artificial), para alinear las operaciones de los responsables con el marco normativo en materia de protección de datos.
  3. Privacidad desde el  diseño y por defecto : Incorporamos los principios en materia de protección de datos personales desde el diseño y por defecto en productos y/o servicios, con enfoque  en nuevos emprendimientos (start-ups), para propiciar el libre flujo transfronterizo de datos en el comercio electrónico, la creación de plataformas digitales, entre otros.
  4. Desarrollo de políticas. Brindamos apoyo para crear políticas corporativas y procedimientos internos que documenten las pautas de empresas y organizaciones, para el debido tratamiento de datos personales, y, a su vez, faciliten el cumplimiento de la regulación.
  5. Autorregulación: Construimos, implementamos y acompañamos en el seguimiento de mecanismos de autorregulación , tales como códigos de conducta , normas corporativas vinculantes y, en general, mejores prácticas aplicables en los distintos espacios de cooperación económica como el Foro de Cooperación Asia Pacífico (APEC), la Unión Europea (UE), el Tratado entre México, Estados Unidos y Canadá (T-MEC) entre otros , así como en cláusulas tipo, cláusulas contractuales o convenios institucionales para realizar transferencias internacionales de datos personales, demostrar el cumplimiento normativo, elevar los estándares de cumplimiento para mejorar los mínimos legales, entre otros.
  6. Auditoría: Verificamos el cumplimiento normativo, de tratamientos de datos personales en curso, para detectar brechas y diseñar un esquema individualizado de soluciones para su implementación.
  7. Development of capacities. Diseñamos e implementamos una amplia gama de programas de capacitación flexibles, eficientes y acordes a las necesidades de cada empresa u organización.
  8. Acompañamiento en la atención de incidentes. Ofrecemos asesoría para cumplir con la normativa ante incidentes de seguridad o vulneraciones en materia de datos personales.
  9. Privacidad para anunciantes: Adecuamos la publicidad en línea a los marcos normativos aplicables, tales como la gestión de cookies, elaboración de avisos de privacidad para anunciantes, asesoría para la gestión y atención de solicitudes de ejercicio de derechos, así como para la gestión de reclamaciones ante la autoridad de protección de datos personales, entre otros.
  10. Oficial de privacidad/delegado de protección de datos: Brindamos el servicio de oficial o delegado, directamente, para empresas u organizaciones, o bien, asesoramos y asistimos a oficiales o delegados designados, para lograr que la privacidad/protección de datos personales, sea un pilar en el que se sustente la confianza en los servicios que se ofrecen.
  11. Oficial de seguridad: Brindamos el servicio de oficial, directamente, para empresas u organizaciones, o bien, asesoramos y asistimos al oficial, o instancia a cargo de la seguridad, designada, para hacer de la seguridad de la información un aliado permanente.
  12. Flujo transfronterizo de datos personales: Desarrollamos diseños y soluciones adecuadas, para cada empresa u organización, para ofrecer los esquemas más robustos y flexibles para participar en los bloques económicos más relevantes y, en general, para ofrecer productos y/o servicios en cualquier país, en el contexto de un comercio global y de un desarrollo tecnológico sin fronteras.

Dafny Mancillas Tripp

Dafny Mancillas

Dafny has a Bachelor Degree in International Relations from the Universidad de las Américas Puebla, and a Diploma in Central American Studies from the Dr. José María Luis Mora Research Institute.

Currently, she is the Project Coordinator of the law firm Videre, specialized in the study of privacy in the digital age. Videre, especializada en privacidad en la era digital.

She has extensive professional experience in the public sector. She worked in the Ministry of Foreign Affairs, in the General Direction for Economic Relations with Latin America and the Caribbean. And in the Ministry of Energy, in the General Direction for International Affairs. Subsequently, at the Federal Institute of Access to Information and Data Protection (IFAI) she held several positions, including Advisor to one of the Institute´s Commissioners and Director of Coordination and Monitoring. Finally, at the National Electoral Institute (INE), she served as Private Secretary to the Head of the Technical Unit for Transparency and Data Protection.

 

Edgardo Martínez Rojas

Edgardo Martínez

Lawyer graduated from the faculty of law of Escuela Libre de Derecho, holding a master’s degree in Data Protection and Access to Information from the San Pablo-CEU University, Madrid, Spain.

Currently a partner at Videre, a legal advisory firm aimed at multi-sectoral services regarding privacy and data protection in the digital era. For more than 20 years, he has focused on the protection of personal data, dedicating 15 years of them to public service and 5 as an independent international consultant.

Edgardo has worked with the Mexican Data Protection Authority (DPA) where he stands out for his participation in the following works:

● Preparation of the draft reforms to the Mexican Constitution to include data protection as a fundamental right.
● Consulting for the adhesion and subscription to the European Convention for the protection of individuals with regard to the processing of personal data and its additional protocol. (Convention 108 of the Council of Europe).
● Negotiation on behalf of the Mexican DPA of the free trade agreement between Mexico, the United States, and Canada (T-MEC/USMCA), specifically in the chapter on electronic commerce (personal data).
● Support for the draft reforms of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.
● Preparation of the draft reforms of the Data Protection General Law applicable to the public sector and the issuing of the secondary regulation derived from it.

From his time as an independent international consultant with the Inter-American Development Bank, the following projects stand out:

● Consulting for regulatory strengthening to facilitate the cross-border flow of personal data between members of the Pacific Alliance.
● Preparation of a comparative study on personal data laws in Latin America and the Caribbean.
● Participation in the creation of the draft Regulation of the Organic Law on Personal Data Protection of Ecuador.
● Advice on the design of draft personal data laws in Bolivia and Honduras.

He currently teaches Iberoamerican Data Protection Standards in the Master's Degree in General Data Protection Regulation of the National University of Distance Education and the Spanish Data Protection Agency from the Escuela Libre de Derecho.

 

Cecilia Azuara Arai

Cecilia Azuara

She is a Lawyer with a master’s degree in law. Currently a Law PhD candidate for the Institute of Legal Research at the National Autonomous University of Mexico (UNAM), which is part of the Institutional Research Project for Law and Artificial Intelligence (LIDIA).

Cecilia is an expert on transparency, proactive transparency, open government, access to information, privacy, data protection, and public archives.

Currently, she’s a founding partner at Videre, a legal advisory firm aimed at multi-sectorial services regarding privacy and data protection in the digital era.

She has 28 years of experience in the public sector, with a 9-years of experience in designing the transparency and access to information policy at the National Electoral Institute (INE) archives. Further positions there include Data Protection Official, advisor to the Federal Voter Registry (the largest database in the country), amongst other administrative areas.

11 years of experience holding distinct positions for the Federal Access to Information and Data Protection Institute, such as Access to Information Secretary, acting as a second level of command in decision-making for the Institution regarding advisory, regulatory, and resolution issues.

Legal advisor for the design and drafting of several laws and regulations regarding access to information and data protection acts in Mexico and Latin America, as well as constitutional and legal reforms on these matters.

Author of several academic publications in legal subjects regarding those topics, and lecturer in international and national forums.

 

Lina Ornelas

Lina Ornelas

Lina is a lawyer and holds a Master’s degree in International Legal Cooperation from the Vrije Universiteit Brussel in Belgium. She’s an expert in classified information, data protection, privacy, online security and Internet governance. As such, she has also published specialized books and academic articles on these subjects.

For 8 and a half years, she was Head of Government Affairs and Public Policy for Mexico, Central America, and the Caribbean at Google. Previously, she worked for 12 years in the public sector in Mexico and Europe, nine of which she served at the Federal Institute for Access to Information and Data Protection (IFAI) as General Director of Classified Information and Personal Data and later as General Director of Self-Regulation within the data protection unit.

Currently, she is a founding partner at Videre, a digital law firm aimed at providing multi-sectoral services on privacy and data protection tailored to the digital era. She’s also a Senior Advisor on Privacy and Internet Governance at Centro-i para la Sociedad del Futuro (think tank).

Lina is a member of NIC Mexico Advisory Committee (ccTLD) as well as the International Association of Privacy Professionals (IAPP). She was also a member of the Advisory Board for the Mexico Institute of the Woodrow Wilson Foundation in Washington DC; of the “Future of Privacy Forum” together with experts in internet privacy, and chaired the Digital Economy Commission of the International Chamber of Commerce (Mexico) for 8 years. She was an associate research professor at the Centro de Investigación y Docencia Económicas (CIDE) where she specialized in issues related to law and new technologies, as well as a professor at the Universidad Panamericana, the Escuela Libre de Derecho, and ITAM in Mexico.

She has participated in more than 300 discussion panels, seminars, and international events, on privacy and data protection, children’s online safety, internet governance, telecommunications, and digital economy, including:

  • World Internet Governance Forum (IGF)
  • Ibero-American Data Protection Network
  • South School of Internet Governance
  • Member of the group of experts for the OAS Cybersecurity Agenda
  • International Institute of Communications (IIC)
  • OECD Ministerial Meeting on the Digital Economy

  • World Internet Governance Forum (IGF)
  • Ibero-American Data Protection Network
  • South School of Internet Governance
  • Member of the group of experts for the OAS Cybersecurity Agenda
  • International Institute of Communications (IIC)
  • OECD Ministerial Meeting on the Digital Economy
  • Representante de Google en el Industry side room en las negociaciones del Tratado Comercial entre México, Estados Unidos y Canadá (TMEC).
  • Múltiples foros en materia de gobernanza de internet, telecomunicaciones, economía digital y protección de datos.

 

Services

About us

We bring together 27 years of experience in high-level public sector positions, consulting for international organizations, and leading public policies on digital platforms across several countries.

Team Member 1

Lina Ornelas

Socia

Team Member 2

Cecilia Azuara

Socia

Team Member 3

Edgardo Martínez

Socio

Team Member 3

Dafny Mancillas

Coordinadora de proyectos

What is Self-Regulation in Data Protection?

Por VIDERE

Self-regulation in data protection refers to the voluntary efforts of companies and organizations to establish and comply with privacy standards, that is, to comply with the law, and even go beyond its requirements by enabling innovation in favor of data subjects.

Read more

What is a Privacy Impact Assessment?

Por VIDERE

A Privacy Impact Assessment (PIA) is a systematic process conducted prior to the implementation of a project, which allows for the identification, analysis, and evaluation of privacy risks associated with the processing of personal data.

Read more
en_USEnglish