IGF 2021 – Day 2 – Lightning Talk #80 Data Governance in Mexico

The following are the outputs of the captioning taken during an IGF virtual intervention. Although it is largely accurate, in some cases it may be incomplete or inaccurate due to inaudible passages or transcription errors. It is posted as an aid, but should not be treated as an authoritative record.



>> We all live in a digital world, we all need it to be open and safe.

We all want to trust

>> And to be trusted.

>> We all despise control, and desire freedom.

>> We are all united.

  [ Silence ]

>> ADRIAN ALCALA MENDEZ: Thank you for attending.  We are waiting for the person responsible in Mexico about the presentation of the national institute for information access there.  In the meantime, I would like to ask the audience if you have a specific interest to be addressed during this session here in place in Katowice or whatever you are right now joining us here?  Yes.

  Adrian, can you introduce this session in the meantime, or can we gulf the audience the opportunity to talk.  We only have 14 minutes left.

Can we have access to the chat?

Please.  It's a pleasure.

Mauricio Hernandez, yes, hi, Mauricio.  Well, I'm ‑‑ I hope, thank you very much, is there somebody else from the audience who has something to share with us, taking advantage of the spot we have for the Mexican conversation.


>> Audience: Thanks so much.  I'm from Mexico, this year I attend this forum because I was part of the summit, and I was a coordinator about the protection group.  So it's so important in this time to talk about the importance of the data because, with the pandemic, there are many, many data that are not protected.  For example, we talk with him about health information data.  There are many information that we need to protect, and the institute of Mexico, about the protection tried to promote many rights as access, and certification, but we need to understand that the importance about data, we need to observe what happened with, for example the technologies with the multiverse, that's why I'm here, because I hope to learn something more about the importance of that or about a specific thing of data.  I don't know if want to introduce what happened in your countries about odds are you from which country, Iran.  What about you, sir?  Okay.

Yes, in Mexico, we have a national institution dedicated to the protection of this era, called NI.  Of course, we have developed standards in terms of how to manage open data for the Mexican people, according to the European standards, and we are already certified on their organization, the disagreement in Brussels, and it's the first country, Latin America, who already got the ‑‑ really what this qualification.  And certainly we are looking for how to collaborate in terms of exchanging experiences with other countries related on how to handle the private data, which relies on the responsibility of the citizen and also for under the perspective of the protection for this data.  It becomes part of the information assistance from the different institutions.

Is there another participation from the people who are joining us online?


>> Audience: It's important to mention, this Mauricio Hernandez, the transparency has also allowed us the second version of huge national platform for transparency, that it's now reached by the right citizens have to promote the information, this means that before public entities, we are not only allowed to ask for public information that it's in our duty to be provided, but also have a right to consult ask, amend or modify or track the personal information, each public entity, each public body has.

This is relevant because considering the information is from talking about the chart, it's important to let know that right now, we are in a very important moment while information ‑‑ health information and biometrics data is in the center of many industries, considering the effects of the pandemic as provided ‑‑ as developing all worldwide.  It has this kind of platform, it's time for public entities to promote this to not only transparency, but to the balance between privacy and defense of human routes in the sense of privacy and protection.

>> MODERATOR: Great comment and certainly the ‑‑ this work has been the result of many people involved into this initiative in our country, is very keen in terms of how to get to this level of transparency for public services, as well as for the proper citizens as such.

Another participation from the audience online, please.

>> Audience: Nation you saw the importance of the institute is  ‑‑ are regulated on the Constitution and the Constitution give to the Institute the force, the power to protect.

I think it's important to mention that one of the challenges in other countries is the right to be forgotten.  I think Mauricio mentioned about that, about the cancellation right.  So it's important to look the way to protect the right to be forgotten.

>> MODERATOR: Yes, Arco is part of the main core of the regulation ‑‑ main core of the regulation and the opt out possibility for the citizen to be deleted in terms of the content in specific databases, it's, of course, a writing in Mexico.

And I am a representative from the Mexican IT Association, which is also strongly committed with companies who are technology providers, and as well with the society in terms of how to take care of all these kind of issues in handling privacy at the highest level of importance.  Of course, cybersecurity, encryption of data, protection of this data, it's something that at the association, it's currently ‑‑ currently reviewed and tried to keep the best standards up‑to‑date for the industry, as well as for the users.

Another comment from our colleagues from Iran or from Belarus?  Do you have something to share with us?

Introduce yourself and make a comment, thanks.

>> Audience: Okay.  I am Hatafu, a company consulting government in Iran, in the field of cybersecurity and identity management.

I think something should be clear, precisely, what's the difference ‑‑ what is the exact meaning of the data governance.  As you told and explained, it seems that you finish enough data governance, is equal to data portation and privacy.  The data governance has a broader meaning, and has different layers, and layers means how to plan, and program the data at national level and the second layer, we have managerial processes which deals with the ‑‑ managing the life cycle of the data, and the second layer is the ‑‑ technical, tactical, technological level, deals with the processes and the ‑‑ Russia, harder, softer and other aspects that deals with how to implement the processes, which is defined for data governance.

I think the holistic view is needed to explain what the data governance, and this is important because it identifies the viewpoints and the importance of governance off are or sovereignty of the data.

What's the different between data governance and data sovereignty at a national level?  We are interested in ‑‑ to understand about data sovereignty, strategy of Mexico, if possible.

>> MODERATOR: Yes, of course, I don't know if Mauricio has ‑‑ wants to say something, it is not the cause, I ‑‑ my comment is there is a ‑‑ there are two different bodies in Mexico working in this direction, one is something which is called a specific union ‑‑ unit for all the official or state information systems, which is in charge of the regulation from the different national standards, as well as how to have this governance map in terms of each one of the official units of the Federal Government.  The same model is replicated in each of the 32 states in Mexico, they are responsible for.  The specifically the governance in terms of which should be placed as open data, which data is classified as sensitive data for different purposes.  The transparency law, and also how to protect this infrastructure and this data and so on.  Regarding the data sovereignty, we do have, of course agreements with different organizations, we have to exchange during this pandemic with who, something already signed and set, and we do have to deliver specific population data for statistical purposes or for public health purposes.  Certainly with all those regulations in terms of which can be exchanged or shared or should be protected in a specific way each official organization has an IT department which is responsible apply the different policies from the national agenda.  As well as the.  [ scheduled captioning will end in one minute ]

>> MODERATOR: The framework from which terms have been complied for.

  [ scheduled captioning will end in one minute.  [ 


Proof, deployed in promotion or online.  And certainly we do differentiate that, on top of that, this transparency, initiative is not only about how to handle the open data, but how to provide access to the final user to this data.  Which until recently, it was a little bit challenging for the citizen, and they sometimes they had to ask for an official requirement to get the data.

  [ scheduled captioning ending ]

The time is already one.  We can stay here for the discuss, but for the purpose of the organizing committee, we thank everybody for joining this session, and I hope we can keep in touch to follow up with our initiatives.  Thank you very much, everybody.

I appreciate everybody to be here and all the participants.  Thank you very much.