Mexico’s Digital CURP and Telephony Registry Enable Mass Surveillance: R3D

Web Editor

June 5, 2025

a security id and a computer security badge are shown in this illustration image credit card and a p

Introduction

The Mexican government’s recent security and identification reforms, according to the Red en Defensa de los Derechos Digitales (R3D), could lay the groundwork for unprecedented mass surveillance in the country. The combination of telephone line registration, a mandatory biometric CURP (Clave Unica de Registro de Populación), and the interconnection of public and private databases pose a significant threat to human rights, privacy, and access to public services.

Who is R3D?

R3D, or the Red en Defensa de los Derechos Digitales, is a Mexican organization dedicated to defending digital rights. Their concerns regarding these reforms highlight the potential risks associated with increased surveillance and data collection.

Mandatory Biometric CURP

The new biometric CURP, which will be mandatory, will include fingerprints and photographs. Its use will be required to access any public or private service, from medical care to purchasing everyday items. Moreover, this CURP will feed into a digital identity platform that enables real-time tracking of individuals’ movements.

Interconnection of Databases

A critical aspect of the proposed legislation is the creation of a National System for Information and Intelligence, which mandates the interconnection of public and private databases. R3D warns that this law would allow authorities to request data without judicial orders or transparency mechanisms.

Data Integration

The data to be integrated includes vehicle, fiscal, commercial, real estate, and telephone records, as well as biometric data. The broad scope of this authority allows for the inclusion of “any information that can provide clues for investigations,” without specifying whether they pertain to criminal investigations or establish safeguards against misuse.

Military Involvement and Sensitive Data

R3D is concerned about the direct involvement of the Mexican army in this scheme. The Secretariat of National Defense (Sedena) has been implicated in severe human rights violations and was the first purchaser of the Pegasus spyware software.

Lack of Accountability

The absence of judicial controls and the exclusion of the National Institute of Transparency (INAI) exacerbate the situation. There are no mechanisms for accountability, nor any budget allocated for this infrastructure, despite the Mexican state’s history of failing to protect sensitive data.

Automated Exclusion and Discrimination

The proposed system not only threatens privacy but can also lead to structural exclusion of vulnerable groups. Biometric technologies have high error rates, particularly affecting older individuals, indigenous people, agricultural laborers, and people with disabilities.

Amplification of Existing Inequalities

The use of automated systems with pre-existing biases could reinforce historical inequalities. R3D warns that these algorithms not only replicate but also amplify prejudices based on gender, race, and class.

Normalization of Suspicion

R3D criticizes these reforms conceptually, as they are based on the idea that all individuals are inherently suspicious. This contradicts democratic principles of presumption of innocence and proportionality, normalizing absolute control in the name of security.

Lack of Technical Feasibility

Beyond the ethical and legal debate, R3D emphasizes the lack of technical viability in this project. There is insufficient digital infrastructure to ensure security, interoperability, and efficient functioning of this massive data network.

Technocratic Solution

Instead of addressing the security crisis with structural strategies, the government is betting on “technocratic solutions” without real foundations or impact assessments, according to R3D.

Key Questions and Answers

  • Q: What is the main concern of R3D regarding these reforms? A: R3D is concerned that these reforms could establish a system of mass surveillance, threatening human rights, privacy, and access to public services.
  • Q: How does the mandatory biometric CURP impact individuals? A: The new CURP will require fingerprints and photographs, necessitating its use for accessing various public and private services. It will also feed into a digital identity platform enabling real-time tracking.
  • Q: What are the risks associated with interconnected databases? A: R3D warns that this could lead to unrestricted data access by authorities, lacking judicial oversight or transparency mechanisms.
  • Q: How might military involvement in data collection pose risks? A: The direct participation of the Mexican army in this scheme raises concerns due to its history of human rights violations and acquisition of spyware software.
  • Q: Could automated systems exacerbate existing inequalities? A: Yes, R3D warns that automated systems with pre-existing biases could reinforce and amplify prejudices based on gender, race, and class.
  • Q: What is R3D’s stance on the lack of technical feasibility? A: R3D emphasizes that there is insufficient digital infrastructure to ensure the security, interoperability, and efficient functioning of this massive data network.