Mexican Courts Suspend CURP Biometric Project Due to Privacy Issues

Published Date : 9/2/2025 

The Unique Personal Registry Code (CURP) project in Mexico, which mandates biometric data collection, has been paused in several regions following court injunctions over data privacy and security concerns. 

The Unique Personal Registry Code (CURP) project in Mexico, which requires the compulsory submission of face, fingerprints, and iris biometrics, is facing significant hurdles. Court injunctions in various parts of the country have halted the project, raising concerns over data security and privacy.

The new personal identification system, which was made mandatory in July, has been suspended by at least three tribunals. Yucatán Magazine reports that one of the suspensions follows a decision from the Collegiate Tribunal for Criminal and Administrative Matters in Yucatán, which ruled on a complaint filed by an individual. Similar decisions have also been granted by tribunals in Mexico City and Querétaro.

The Mexican government introduced the 18-digit digital ID system to streamline identity verification, including for the location of missing persons. The CURP system, first introduced in 1996, is now biometric-based and embedded with a QR code. However, the courts have emphasized that the government must balance its intentions with concrete legislative and government frameworks to protect citizens' data effectively.

Last month, the country’s Ministry of Interior, through the National Population and Identity Registry (Renapo), announced a $28 million tender for cloud and cybersecurity infrastructure services to ensure the security and privacy of citizens' data associated with the CURP system. Despite this move, digital rights advocates remain unconvinced. They argue that more satisfactory measures must be adopted for the system to proceed and are calling for assurances that the CURP biometric system will not be used as a digital surveillance tool.

The court injunctions are a significant setback for the government, which had set an October 16 deadline for public authorities to mandatorily accept the CURP as the primary ID verification system. Nationwide rollout was initially slated for 2026. The situation in Mexico echoes concerns in other countries, such as Uganda, where the biometric national ID system is labeled by rights advocates as a digital surveillance danger.

The halt in the CURP project highlights the ongoing tension between technological advancements and the need to protect individual privacy. As the debate continues, the Mexican government will need to address these concerns to regain public trust and ensure the successful implementation of the biometric ID system. 

Frequently Asked Questions (FAQS): 

Q: What is the CURP project in Mexico?

A: The CURP (Clave Única de Registro de Población) project in Mexico is a biometric identification system that requires the collection of face, fingerprints, and iris data. It was introduced to streamline identity verification and locate missing persons.

Q: Why has the CURP project been halted in some regions?

A: The CURP project has been halted in some regions due to court injunctions over concerns about data security and privacy. Tribunals in Yucatán, Mexico City, and Querétaro have suspended the mandatory biometric data collection.

Q: What steps has the Mexican government taken to address privacy concerns?

A: The Mexican government has announced a $28 million tender for cloud and cybersecurity infrastructure services to ensure the security and privacy of citizens' data associated with the CURP system. However, these measures have not convinced digital rights advocates.

Q: What are the concerns of digital rights advocates?

A: Digital rights advocates are concerned that the CURP biometric system could be used as a digital surveillance tool. They are calling for more satisfactory measures and assurances to protect citizens' privacy.

Q: What is the status of the CURP project's nationwide rollout?

A: The nationwide rollout of the CURP project, initially slated for 2026, has been delayed due to court injunctions. The government had set an October 16 deadline for public authorities to accept the CURP as the primary ID verification system, but this deadline has been affected by the injunctions. 

More Related Topics :