HomeState LawsNew Mexico

New Mexico Accessibility & Privacy Laws

New Mexico does not currently have a comprehensive consumer privacy law like California's CCPA or Virginia's VCDPA. However, the state has data breach notification requirements and maintains accessibility standards for state government digital services. Businesses operating in New Mexico should monitor legislative developments while ensuring compliance with existing federal and state requirements.

Accessibility Standards

State Government Policy

New Mexico state agencies follow accessibility guidelines under the Department of Information Technology (DoIT) and ADA Title II requirements.

Privacy Status

No Comprehensive Law

New Mexico has data breach notification requirements but no comprehensive consumer privacy legislation at this time.

Privacy Law Status

New Mexico has not enacted comprehensive consumer privacy legislation. However, the state has several sector-specific and general consumer protection laws that affect data privacy:

Current Privacy Protections

  • Data Breach Notification: New Mexico's Data Breach Notification Act (NMSA 57-12C) requires businesses to notify consumers of security breaches
  • Consumer Protection: The Unfair Practices Act prohibits deceptive trade practices including misleading privacy claims
  • Student Data: The Student Data Privacy Act protects K-12 student information
  • Insurance Data: Regulations protect personal information in insurance transactions

Data Breach Notification Requirements

Requirement Details
Notification Trigger Unauthorized acquisition of unencrypted personal identifying information
Covered Information Name plus SSN, driver's license, financial account, or biometric data
Notification Timeline Within 45 days of breach discovery
AG Notification Required if breach affects more than 1,000 residents
Credit Reporting Must notify credit bureaus if more than 1,000 residents affected

New Mexico State Government Accessibility

New Mexico's Department of Information Technology (DoIT) provides guidance on digital accessibility for state agencies. State government websites must comply with ADA Title II requirements to ensure equal access for people with disabilities.

Covered Entities

Accessibility Standards

Business Obligations

While New Mexico lacks a comprehensive privacy law, businesses have obligations under existing state and federal laws:

Data Security Requirements

  • Implement reasonable security measures
  • Protect personal identifying information
  • Properly dispose of records containing personal data
  • Notify consumers of data breaches
  • Report significant breaches to Attorney General

Key Agencies

  • New Mexico Attorney General
  • Department of Information Technology (DoIT)
  • Office of the State Auditor
  • Human Rights Bureau
  • Public Education Department (student data)

Consumer Rights

New Mexico consumers have certain rights under existing law:

Future Developments

Privacy legislation continues to be introduced in state legislatures across the country. New Mexico residents and businesses should monitor:

Related Resources

Need Compliance Guidance?

While New Mexico doesn't have comprehensive privacy legislation, businesses must still comply with data breach notification requirements and accessibility standards. Contact our experts for guidance on current obligations and preparing for future privacy regulations.

Contact Us