Skip to main content
MediGuide provides comprehensive legal compliance information to help users understand the regulatory requirements for operating a health monitoring platform in Mexico. Legal compliance information is accessible from the footer of the application:
1

Scroll to Footer

Navigate to the bottom of any page in the application
2

Click Legal Information

Click the Información Legal button in the footer
3

Review Compliance Details

A modal window opens with detailed legal information
4

Close Modal

Click Cerrar or use browser back button to close
The legal information section covers key Mexican regulations applicable to health websites:

1. Health and Advertising Regulations (COFEPRIS)

Article 300: Advertising must not attribute preventive, therapeutic, or rehabilitative qualities to products or services that don’t have them.Article 310: Advertising of health services requires authorization or notice from the Ministry of Health through COFEPRIS.
Article 8: Requires professional credentials (cédula profesional) to be displayed visibly.Article 79: Prohibits:
  • Promising infallible results
  • Using patient testimonials without specific permissions
  • Offering free consultations as promotional tools
  • Using ambiguous or overly technical language
Articles 118-119: Details the process for obtaining advertising permits or filing notices with COFEPRIS.

2. Data Protection (INAI)

Article 3, Section VI: Defines health data as sensitive personal data requiring highest protection.Article 9: Treatment of sensitive personal data requires explicit written consent.Articles 15-16: Requires a Privacy Notice (Aviso de Privacidad) to be accessible before users enter any data.Article 19: Mandates administrative, technical, and physical security measures (encryption, secure databases).

3. Professional Practice Regulations

Article 25 (Ley de Profesiones): Requires professional credentials to be displayed prominently.NOM-004-SSA3-2012: Defines medical record structure and 5-year retention requirements.NOM-024-SSA3-2012: Regulates electronic health record systems (SIRES) for security and interoperability.

4. Consumer Protection (PROFECO)

Article 7: All information must be truthful, verifiable, and clear.Article 32: Prohibits misleading advertising.Article 76 Bis: Regulates e-commerce transactions including:
  • Secure and confidential information handling
  • Clear pricing and service information
  • Accessible terms and conditions

Compliance Checklist

The legal information includes a practical checklist for compliance:

Required Actions

  1. Legal Consultation
    • Hire specialized legal counsel in health law and data protection
  2. COFEPRIS Registration
    • Prepare website project documentation
    • File Advertising Notice or obtain Advertising Permit
    • Include professional credentials in filing
    • Do not launch until approval/acknowledgment received
  3. Legal Documents
    • Privacy Notice: Comprehensive document for sensitive health data
    • Terms and Conditions: For appointment scheduling and payments
    • Consent Mechanisms: Explicit consent collection for data processing
  4. Website Design Requirements
    • Display professional credentials (cédula profesional) prominently
    • Ensure all content is informative and scientifically accurate
    • Never promise guaranteed results
    • Implement mandatory consent checkboxes before form submission
  5. Technical Security
    • SSL certificate (HTTPS)
    • Encrypted database storage
    • Access control measures

Contact Information

For questions about legal compliance or implementation: Email: [email protected]
Phone: (614) 609 7295

Important Disclaimer

The legal information provided is educational and informational, based on public Mexican federal legislation. It does NOT constitute legal advice. Legislation may change and exact application depends on your specific case.It is absolutely essential to consult with a specialized attorney in health law and data protection before launching any health-related project.

Why This Matters

Understanding and complying with these regulations:
  • Protects Patients: Ensures data security and privacy
  • Maintains Professional Standards: Demonstrates serious medical practice
  • Avoids Penalties: Prevents severe sanctions from COFEPRIS or INAI
  • Builds Trust: Shows commitment to legal and ethical standards

Next Steps

Creating Account

Learn how to set up your MediGuide account

Understanding Privacy

Review authentication and data security features

Build docs developers (and LLMs) love