Mexico has not yet explicitly included biometric data as a special category of personal data (or sensitive data), but this has not stopped the national Data Protection Authority from deciding that this data will be protected as such. How is it doing it so?

If you ask GDPR professionals about how biometric data is regulated in the European Union (EU) it is pretty sure all of them will tell you that “biometric data for the purpose of uniquely identifying a natural person” is deemed as a special category of personal data (namely “sensitive data”). This is also the case in some Latin American countries, where biometric data is explicitly protected as a sensitive data.