Running background checks in Mexico is legal and routine, but it is tightly gated by privacy law: no screening can begin without the candidate’s express written consent, and the information you can act on is bounded by federal anti-discrimination rules. Within those limits, employers typically verify identity, criminal history, formal employment through social security records, educational credentials, and, for certain roles, credit and tax compliance.
Get Written Consent Before Anything Else
The Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) governs every step of a background check. Most screening data — criminal history, health information, union membership — falls under the law’s “sensitive personal data” category, and Article 9 requires consent that is both express and written, authenticated by a handwritten signature, electronic signature, or equivalent mechanism.1Cámara de Diputados del H. Congreso de la Unión. Ley Federal de Protección de Datos Personales en Posesión de los Particulares
A signed authorization is only half of the compliance picture. Before any data is collected, the candidate must also receive a privacy notice explaining what will be gathered, why, how it will be used, and who may see it. The implementing regulations to the LFPDPPP add further rules on how the data must be stored, protected, and eventually destroyed.2Federal Official Gazette. Regulations to the Federal Law on the Protection of Personal Data Held by Private Parties
Skipping either step is expensive. Administrative fines under the LFPDPPP run from 100 to 320,000 times the daily UMA — at the 2026 daily UMA of 117.31 pesos, that is roughly 11,700 pesos to more than 37.5 million pesos.3INEGI. UMA Criminal penalties also apply. Someone authorized to handle personal data who causes a security breach for profit faces three months to three years in prison; processing personal data through deception for unlawful gain carries six months to five years. When the compromised data is sensitive, those prison terms double.1Cámara de Diputados del H. Congreso de la Unión. Ley Federal de Protección de Datos Personales en Posesión de los Particulares
Enforcement is in transition. The National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) was dissolved under a constitutional reform enacted in November 2024, and as of March 2025 its functions sit with the newly created Ministry of Anti-Corruption and Good Governance. How aggressively the ministry will pursue data privacy cases is an open question, but the underlying LFPDPPP obligations have not changed.
What You Can and Cannot Screen For
The Federal Labor Law sets hard limits on what a screening result can be used to justify. Article 3 prohibits workplace discrimination based on race, nationality, gender, age, disability, religion, immigration status, health condition, sexual orientation, political opinion, or social status, and Article 133 specifically bars refusing to hire someone based on age or gender.
Two prohibitions sit at the center of pre-employment screening. Employers cannot require pregnancy tests or HIV tests as a condition of employment, and firing an employee for living with HIV is treated as unlawful termination. Medical exams are allowed only when they are reasonable and set out in company policy, and cannot be used as cover for discriminatory screening.
Drug and alcohol testing for applicants is permitted, and an employer can legally refuse to hire a candidate who declines to test, provided the policy complies with data privacy rules and is not a pretext for discrimination. The policy has to be written into company rules and applied consistently rather than aimed at specific candidates. Safety-critical industries such as transportation, manufacturing, and energy are the most common users.
Reforms enacted on January 15, 2026, strengthened anti-discrimination duties further, adding an explicit obligation to keep workplaces free from discrimination and violence, mandatory training on preventing workplace violence (with particular attention to gender-based violence), and a push for substantive equality between men and women. Violating any anti-discrimination provision carries fines of 250 to 5,000 times the daily UMA.
Identity Documents to Collect
Every check begins with a set of standardized identifiers that unlock the underlying government databases. The consent form should list the candidate’s full legal name with both paternal and maternal surnames, date of birth, and a signature matching the INE card. Small mismatches routinely block or delay lookups.
- CURP — the 18-character Clave Única de Registro de Población, assigned to every citizen and resident by the National Population Registry. It is the key to most administrative records.
- RFC — the tax identification number issued by the Tax Administration Service (SAT), held by any individual or entity engaged in economic activity.4Tax Administration Service. Inscription at the Federal Taxpayer Registry
- INE card — the credential from the National Electoral Institute, which functions as Mexico’s de facto national ID.5Instituto Nacional Electoral. Electoral Registry
Criminal Records Are Federal and State
Criminal history in Mexico is split between two systems, and this is where employers most often miss coverage. A federal certificate captures only federal offenses. State governments issue their own separate certificates for state-level crimes, and full coverage requires pulling both.6Consulado General de México en Frankfurt. Criminal Record Check
At the federal level, the certificate most employers request is the Constancia de Antecedentes Penales Federales (CANP), issued by the OADPRS under the Secretaría de Seguridad y Protección Ciudadana. The candidate obtains it online through the OADPRS portal using their CURP, at no cost, and typically receives a digitally signed PDF by email within minutes.7PRS. Constancia de Antecedentes Penales Federales8Consulado General de México en Boston. Constancia de Datos Registrales / Carta de No Antecedentes Penales A parallel document, the Constancia de Datos Registrales (CDR), is issued by the Attorney General’s Office (FGR).
State certificates are issued by each state government independently, and process, cost, and turnaround vary. For roles involving security, finance, or public trust, request both the federal certificate and the state certificate for every state where the candidate has lived or worked. A federal-only check leaves state convictions invisible.
Employment History Through IMSS
The Mexican Social Security Institute (IMSS) holds a record of every worker registered by a formal employer, showing which employers registered the person, registration and deregistration dates, and total contribution weeks accumulated across their career.9IMSS. Semanas Cotizadas – SISEC The resulting timeline is hard to fabricate and one of the most reliable employment verification tools in the country.
The blind spot is informal work. IMSS records capture only formal employment where the employer registered the worker. Independent contractors and anyone who worked off the books will not appear, and Mexico’s informal economy is large enough that gaps do not automatically mean a candidate misrepresented their history.
Educational Credentials and Professional Licenses
For regulated professions — medicine, law, engineering, architecture, accounting — practice requires a Cédula Profesional issued by the Secretariat of Public Education (SEP). SEP’s National Registry of Professionals lets you verify a candidate’s license number, the institution that granted the degree, and the field of study through an online lookup.10SEP. Sistema de Cédulas Profesionales
For roles that do not require a Cédula, there is no single centralized database of academic degrees. Verification usually means contacting the issuing institution directly, which is slower and more manual than the IMSS or criminal record checks.
Credit and Tax Compliance Checks
Credit checks run through Buró de Crédito, Mexico’s primary credit information company. A report shows current and past credit accounts, on-time and late payment history, credit limits, and every entity that has previously consulted the file, along with a numerical credit score.11Buró de Crédito. Buro de Crédito Pulling a report requires the candidate’s express written authorization, valid for one to two years depending on the arrangement. Individuals can also block access to their file entirely.
Employers in finance and accounting routinely include credit checks to gauge fraud risk from financial pressure, but a poor score alone is a weak basis for rejection given the breadth of Mexico’s anti-discrimination protections.
Tax compliance can be verified through the SAT’s “Opinión del Cumplimiento,” which confirms whether a taxpayer is current on federal obligations under Article 32-D of the Federal Fiscal Code.12Portal de Trámites y Servicios del SAT. Opinión del Cumplimiento Taxpayers can authorize third parties to consult their status. The check is most common in government contracting and senior financial hires; it is not a standard part of general employment screening.