Mexico fines football federation $2.3 million over fan data privacy violations

Monday 13 - 17:46

By: Azzat Manal

Mexico fines football federation $2.3 million over fan data privacy violations

Mexican authorities have imposed a 42.8 million peso (approximately $2.3 million) fine on the Mexican Football Federation (FMF) over violations of personal data protection regulations linked to its Fan ID identification system used at football stadiums.

According to the government, the investigation found that the federation failed to properly inform supporters about how their biometric information would be collected, processed, and stored. Officials also concluded that the organization did not obtain the explicit written consent required by Mexican law before processing sensitive personal data.

The Fan ID system was introduced to strengthen stadium security by verifying the identity of spectators and was widely implemented during the 2026 FIFA World Cup in Mexico. The technology relies on biometric information to manage access to football venues and improve crowd control.

Authorities stated that the federation also failed to clearly identify facial images and other biometric information as sensitive personal data in its privacy notices. This, they argued, prevented users from making fully informed decisions about how their information would be used.

Investigators further noted that requesting consent through a simple online checkbox did not satisfy the legal standards governing the processing of sensitive biometric data, which require explicit and unambiguous authorization.

The size of the financial penalty reflects the seriousness of the violations, the sensitive nature of the data involved, and the federation's financial capacity. The Mexican Football Federation has the right to challenge the decision through the country's legal appeal process.

The case highlights the growing importance of data privacy in modern sports, where digital identification systems, facial recognition technology, and biometric verification are increasingly used to improve security and enhance fan management. As stadiums adopt more advanced technologies, sports organizations are facing greater regulatory scrutiny to ensure compliance with privacy laws and protect the personal information of supporters.