Analyzing critical legal trends and developments across data, cyber, AI and digital regulations from around the world and beyond borders

In brief

On 17 September 2025, the Mexican Chamber of Deputies approved a bill amending Article 76 BIS of the Federal Consumer Protection Law. The bill introduces new obligations for providers offering subscriptions or memberships with automatic recurring charges.

Key takeaways
  • Clear disclosure of recurring charges: Providers must clearly, prominently and accessibly inform consumers if the contracted service involves automatic recurring charges, including the frequency, amount and date of each charge.
  • Express and informed consent: Recurring charges require the consumer’s express and informed consent.
  • Advance notice of automatic renewal: If the contract provides for automatic renewal, the provider must notify the consumer at least five calendar days in advance, allowing cancellation without penalty.
  • Immediate cancellation mechanisms: Providers must implement mechanisms that allow consumers to immediately cancel the service, subscription or membership.
  • Entry into force: The Chamber of Deputies has approved the bill. As this bill received unanimous support from all parties, it is anticipated that the Senate will also approve it by majority vote. If that is the case, the amendments would likely enter into force in the following weeks or months.
Practical implications
  • Compliance: Providers of digital services, streaming platforms, software as a service and any business model involving recurring charges must review and update their consumer disclosures, consent mechanisms, renewal notifications and cancellation processes.
  • Risk: Noncompliance may expose providers to administrative sanctions, consumer claims and reputational risk.
  • Consumer experience: The law aims to prevent “dark patterns” and ensure that consumers can easily understand, manage and cancel recurring services.
Next Steps
  • Audit your subscription and membership processes for compliance with the “immediate termination” rule.
  • Prepare arguments in connection with potential refund claims filed by consumers.
  • Update terms and conditions, user interfaces and notification systems as needed.
  • Train customer service teams on new cancellation protocols.

For further information or assistance with compliance, please contact our team

Author

Carlos is one of Mexico's most active privacy, data protection and information security lawyers. He has implemented privacy management compliance programs for over 100 companies, including several Fortune 500 companies. He advises on corporate and commercial matters where privacy is an issue, including e-discovery, FCPA investigations, e-commerce, direct marketing, privacy in the workplace, litigation and M2M communications.

Author

Daniel Villanueva Plasencia is a member of Baker McKenzie’s Intellectual Property Practice Group in Guadalajara. He has extensive experience in intellectual and industrial property matters, including trademarks, patents and copyrights. Prior to joining the Firm, he was the founding partner of a local firm in Guadalajara.

Author

Paulina is an associate in the Mexico City office with seven years of experience in the legal field. She specializes in data privacy and security, technology, media, and telecommunications (TMT), as well as e-commerce, and commercial and software contracts. Additionally, she handles matters related to the aeronautical industry. Paulina holds an advanced LL.M. in law and digital technologies from Universiteit Leiden in the Netherlands. Her unique perspective comes from a year spent working abroad in Germany's automotive industry.