Yesterday Mexico's Federal Institute for Information Access and Data Protection (IFAI) initiated proceedings to impose sanctions on Google Inc's Mexican branch for possible breach of the country's data protection law.
The move followed a request by an unidentified individual for Google Mexico to erase his personal data from the search engine and to stop using it, in accordance with local rules saying that citizens have the right to have "inaccurate or incomplete data pertaining to them rectified." The Federal IFAI issued a statement saying it received the request in September last year after Google Mexico failed to respond to the request. Failing to comply with a government order can result in fines of up to £1 million. The IFAI rejected Google Mexico's contention that the request applied to parent company Google's search engine, and not the Mexican unit.
The case echo's last June's ruling by the European Union's Court of Justice that companies based outside the EU are still obliged to meet EU data protection rules regarding ‘the right to be forgotten'.