A/65/154 Mexico [Original: Spanish] [18 May 2010] General overview of information security problems 1. In Mexico, the banking and financial institutions, as well as the units of the Federal Government dealing with public security and national security, are the organizations making the greatest effort in the area of computer security. There is a Cybercrime Unit and a cyberpolice unit within the Federal Public Security Secretariat to deal with public security cybercrime. 2. On the other hand, although individual efforts to combat cybercrime are being made in the three branches of government, the Federal Government does not have a cybersecurity policy governing strategies to combat cybercrime in Mexico, the legislation on the subject must be strengthened, judges need more tools for dealing with and punishing cybercrime, and the regulations on Internet service providers also need to be expanded so that they are required to keep a record of activity on their platforms and to provide information in the event of an incident. There is also a need for domestic agreements and cooperation arrangements with other countries for combating cybercrime and cyberterrorism undermining national security. Measures adopted at the national level to enhance information security and contribute to international cooperation in this area 3. Efforts are being made in Mexico to create certainty as regards information security: (a) Certain cybercrimes are covered in the following laws: Federal Criminal Code, Federal District Criminal Code, Federal Code of Criminal Procedure, Coloma Data Protection Act, and Criminal Codes of the states of Aguascalientes, Sinaloa, Tabasco and Tamaulipas; (b) On 30 April 2009, the Official Gazette of Mexico published the Decree adding section XXIX-O to article 73 of the Political Constitution of the United Mexican States, authorizing Congress to legislate on the protection of personal data in the possession of individuals; (c) On 1 June 2009, the Decree was published adding a second paragraph to article 16 of the Constitution, recognizing that all individuals are entitled to protection of their personal data and the right to access, correct and delete such data, as well as to express their objection, in the manner established by the law, which establishes grounds for waiving the principles governing data processing for reasons of national security, law and order, public safety and health or to protect the rights of third parties; (d) The Computer Security Incident Response Team of the National Autonomous University of Mexico deals with security problems in academia and provides support and technical advice to the Mexican authorities in dealing with cybercrime; (e) There is a cyberpolice unit in the federal police force to follow up investigations on public security crimes; 10-45842 7