Mexico has released a compliance report on outbound calling and personal privacy. The report introduces the national Do Not Call registry REPEP operated by PROFECO, specifies time restrictions for telemarketing outbound calls, and outlines the REUS list for the financial sector, privacy protection legislation, responsibilities of regulatory authorities, together with practical compliance guidance for domestic and foreign companies conducting outbound call services.
REPEP stands for Registro Público para Evitar Publicidad (Public Registry to Avoid Advertising). Consumers may register mobile and landline numbers free of charge to reject sales calls for goods and services via the official website and designated hotlines. Companies carrying out marketing outbound calls must subscribe to, regularly download and update the REPEP list to filter call lists and refrain from dialling registered numbers. Violators face substantial fines and may be ordered to suspend operations in serious cases. Calls for debt collection, political campaigning, charitable fundraising and public opinion surveys are exempt from REPEP restrictions. Promotions of financial products are governed by a separate opt-out list REUS managed by CONDUSEF, with which financial institutions must comply.
Amended legislation sets clear time boundaries for marketing calls: promotional calls may only be placed between 08:00 and 19:00 local time from Monday to Friday. Telemarketing outbound calls are prohibited on weekends and official public holidays. The report also outlines requirements under Mexico’s Federal Law on Protection of Personal Data Held by Private Parties for personal data processing. Companies must provide privacy notices, respect users’ ARCO rights of access, rectification, cancellation and opposition, and ensure compliance for call recording.
For overseas companies targeting Mexican users, the report reminds firms that the above rules apply even if the company is not located in Mexico. Businesses must use legitimate caller IDs, maintain internal do-not-call lists and retain compliance records to mitigate risks such as carrier blocking of numbers and regulatory sanctions.
