The Mexican government has approved legislative reforms that will make a biometric-based digital ID mandatory for all citizens.

“Last month, legislators approved amendments to a law related to the 18-character personal identifier, known as Unique Population Registry Code (Clave Única de Registro de Población – CURP), with the change formalized on Wednesday through a decree,” Biometric Update reports.

According to the outlet, the CURP will contain personal and biometric information, including a photograph and a QR code that includes fingerprint and iris data.

The rollout of the mandatory biometric digital ID is expected to begin in February 2026.

Will Mexican citizens comply?

More from Biometric Update:

The government has also allowed the consolidation of the citizen codes into a single identity platform that will be connected to other state databases and administrative records. According to the decree, the Ministry of the Interior and the Digital Transformation Agency must create a Unified Identity Platform within 90 days, while public and private institutions will be required to update their system to recognize the identifier.

ADVERTISEMENT

The country also plans to kick-start a national program to collect biometric data from children and adolescents within 120 days, according to news outlet Mexico Business.

The first CURP was issued in 1996, allowing both citizens and residents to use it in tax filings, company records, schools, passport applications and other government services. The biometric version of the code began rollout at the beginning of 2025.

Privacy advocates, however, have viewed the introduction of the mandatory biometric ID with suspicion, raising concerns that the CURP will lead to surveillance and data security issues.

The new law, for instance, does not require authorities to inform citizens when their data is viewed or accessed.

“Mexico just made biometric digital ID mandatory. What was once a voluntary CURP code now includes your fingerprints, iris scan, and photo, all in a scannable QR required for taxes, schools, passports, and more,” Reclaim The Net wrote.

“A new Unified Identity Platform will merge public and private data into one system. Biometric data collection on minors starts soon,” it added.

Mexico Business News has more:

The updated biometric CURP will contain detailed personal and biometric information, including the first two letters of the paternal last name, the first letter of the maternal last name, and the initial of the first given name, except for common names like José or María, where the second given name is used instead. It will also feature the last two digits of the birth year, birth month and day, a gender identifier, and a birthplace code. Additional elements include a unique three-character alphanumeric key, a certification statement by RENAPO, and a digital signature in newer versions. The CURP will also display the applicant’s photograph and a QR code containing biometric data such as ten fingerprints and iris scans of both eyes.

While no exact start date has been announced, authorities expect a gradual rollout with full enforcement by Feb. 2026. The decree requires the creation of a Unified Identity Platform within 90 days, developed by the Ministry of the Interior and the Digital Transformation Agency, to integrate biometric data into the CURP and connect the National Population Registry with the healthcare system. Public and private institutions will be required to update their systems to recognize the biometric CURP for official procedures. Moreover, within 120 days, a national program will begin collecting biometric data from children and adolescents in partnership with relevant organizations.

ADVERTISEMENT

Alongside CURP reforms, President Claudia Sheinbaum issued 11 additional decrees following the recent extraordinary session of Congress. These include establishing the National Guard as a permanent public security force under military command but trained in policing, now operating under the Ministry of National Defense. Changes to the Telecommunications Law mandate that providers share users’ real-time geolocation with security authorities upon request and require CURP verification to activate or maintain mobile lines. The Wildlife Law bans the use of marine mammals in entertainment, prohibiting acrobatic performances and imposing fines up to MX$8 million for violations.

Other reforms reinforce legislation on forced disappearance and population registries to enhance search and identification processes. They also encompass national security intelligence and investigation, amendments targeting illicit financial operations, and updates to social development, budgeting, and government accounting laws. Further changes include revisions to the Economic Competition Law and regulations governing state-owned entities, the harmonization of railway and transportation laws, and the elimination of bureaucratic obstacles.

 

Join The Conversation. Leave a Comment.