This is an Insight article, written by a selected partner as part of GIR's co-published content. Read more on Insight

General context and principles

1 Identify the highest-profile corporate investigation under way in your country, describing and commenting on its most noteworthy aspects as it relates to your country.

Odebrecht is a wide-reaching corruption scandal involving payments in bribes within Brazil, Venezuela, the Dominican Republic, Panama, Angola, Argentina, Ecuador, Peru, Guatemala, Colombia, Mexico, Mozambique and, presumptively El Salvador and Portugal, totalling US$800 million.

In relation to Mexico, Odebrecht has acknowledged paying US$10.5 million in bribes to officials of the state-owned oil company, Pemex. Mexico has now banned federal institutions and state governments from doing business with Odebrecht SA, a Brazilian construction firm, for the next two years and fined the company close to US$60 million. In addition, the Ministry of Public Function dismissed public official Marco Antonio Sierra Martínez from his position at Pemex, disqualified him from holding any public office for 10 years and fined him US$6.2 million for authorising excess payments for the construction of a Pemex refinery in Tula, Hidalgo.

2 Outline the legal framework for corporate liability in your country.

Corporations can be held liable under administrative, criminal and civil laws.

  • Administrative liability of corporations is provided under the General Law of Administrative Responsibilities.
  • Criminal liability of corporations is provided under the National Code for Criminal Proceedings, the Federal Criminal Code and local criminal codes (depending on the applicable jurisdiction).
  • Civil liability of corporations is provided under the Federal Civil Code and local civil codes (depending on the applicable jurisdiction).

3 In your country, what law enforcement authorities regulate corporations? How is jurisdiction between the authorities allocated? Do the authorities have policies relating to the prosecution of corporations?

In terms of administrative liability concerning potentially corrupt conduct, two principal authorities are in charge of imposing administrative liability on corporations: the Ministry of Public Function (which is in charge of investigating improper conducts) and the Federal Court of Administrative Justice (which is in charge of imposing sanctions on corporations). As regards corporate criminal liability, two authorities are involved in imposing liability on corporations, namely prosecutors and courts. Jurisdiction is shared between federal and state authorities for both administrative and criminal liability.

There are no general rules or policies relating to the prosecution of corporations. The guidelines for determining principles of corporate prosecution, the duties of the prosecutors, and the factors to be considered for the sanctions imposed would depend entirely on the law enforcement authority applicable to the case.

Jurisdiction between authorities is allocated in federal and state matters, depending on (1) where the conduct took place, (2) the nature of the conduct being investigated, (3) whether there are federal interests involved, and (4) for criminal matters, whether the crime in question is expressly included within the purview of federal jurisdiction as provided under the Organisational Law of the Federal Judicial Power.

4 What grounds must the authorities in your country have to initiate an investigation? Is a certain threshold of suspicion necessary to trigger an investigation?

Mexican authorities have ample discretion to initiate investigations. However, in practice, authorities will typically start an investigation having been made privy to information suggesting that there are violations to the legal provisions to which the company is subject.

5 Does double jeopardy, or a similar concept, apply to prevent a corporation from facing criminal exposure in your country after it resolves charges on the same core set of facts in another country?

Yes. Double jeopardy, or non bis in idem defence, is provided under article 23 of the Mexican Constitution, and is understood to mean that no person may be sanctioned twice for the same crime. Hence, if a corporation has faced criminal prosecution and conviction in a country outside Mexico for a certain crime and, thereafter, a Mexican prosecuting authority brings a case against that corporation for the same crime, the corporation could raise this defence. The Mexican Constitution does not limit the defence to crimes relating to the same core set of facts. Moreover, there have been no cases so far that test whether the double jeopardy defence will hold when a corporation has faced prosecution for both administrative and corporate criminal liability relating to the same criminal conduct. However, there have been several cases in the past two years relating to the prosecution of individuals in which the double jeopardy defence is implicated. However, they offer contradictory positions, at times allowing for the imposition of sanctions from both administrative agencies and criminal prosecutors and, at other times, prohibiting parallel sanctions from administrative and criminal authorities. These are non-binding precedent.

6 Does criminal law have general extraterritorial effect in your country? To the extent that extraterritorial effect is limited to specific offences, describe those which have extraterritorial effect, the statutory basis and any conditions that must be met for extraterritoriality to apply.

Yes, criminal law has extraterritorial effects for the purposes of prosecuting foreign bribery in international business transactions (Mexico will exercise extraterritorial jurisdiction in this context for bribery against both an individual and a corporation). Article 222 bis of the Federal Criminal Code sanctions bribery of a foreign official to obtain an improper advantage.

7 Describe the principal challenges in your country that arise in cross-border investigations, and explain whether and how such challenges are dependent on other countries involved.

The principal challenges that arise in cross-border investigations are:

  • identifying all laws and policies that may be relevant;
  • maintaining confidentiality of what comes to light during interviews with employees. This is often an issue as there is a weak confidentiality culture in Mexico;
  • interviewing employees who, in some cases, may have the right to refuse to co-operate and report incriminatory information about themselves and their co-workers;
  • implementing controls and efficient processes that take into consideration the cultural differences between countries;
  • ensuring effective communication throughout the course of the investigation;
  • complying with data privacy and confidentiality laws;
  • determining which findings are relevant and which should be reported; and
  • determining appropriate remedial actions.

These challenges are compounded when other countries involved have different laws that are applicable to the investigation. Further, remedial action is often determined by both the domestic and the foreign regulators, who have to decide such matters as whether to sanction a company for the violation of a law or to adjust the size of a criminal penalty that might be assessed against the culprits.

8 What bearing do the decisions of foreign authorities have on an investigation of the same matter in your country?

This a relatively new area of law. Mexican authorities may exercise their right to prosecute conduct that is sanctioned under Mexican statute, regardless of whether a foreign authority is investigating the same conduct. Moreover, in the event that Mexico has a multilateral co-operation agreement with the country in which a parallel investigation has already started, Mexican authorities appear to be open to sharing evidence.

One of the most notable examples in recent times is Odebrecht, in which Mexican prosecuting authorities have been very vocal in stating that they will not make use of Brazilian agreements to accept evidence collected by Brazilian prosecutors as part of the Operation Car Wash investigation. Mexican criminal enforcement authorities have stated that they are of the opinion that such crimes should be prosecuted under Mexican law to the full extent available. However, they have not made any details of their investigations public. Conversely, on the administrative front, Odebrecht was sanctioned in early September 2018 with a fine of a little over 1 billion pesos (which roughly equates to US$50 million).

9 Do your country’s law enforcement authorities have regard to corporate culture in assessing a company’s liability for misconduct?

Yes, pursuant to article 422 of the National Code of Criminal Proceedings, law enforcement authorities shall consider the following aspects of corporate culture when determining a corporation’s liability:

  • the magnitude of the non-compliance of due control in the company’s organisation;
  • the extent to which the corporation required its agents to act in accordance with the law;
  • the legal nature and the volume of the company’s annual business;
  • the position that the individuals who participated in the crime held in the company;
  • the extent to which the corporation has complied with legal regulations and statutory provisions; and
  • the economic and social consequences the infringement may cause to society.

In addition, article 25 of the General Administrative Responsibilities Law provides that the company’s ‘integrity policy’ must be considered by the law enforcement authority for determining the corresponding sanctions, where applicable.

10 What are the top priorities for your country’s law enforcement authorities?

The most relevant priorities of the Mexican law enforcement agencies are antitrust, intellectual property, money laundering, fraud, trafficking of minors, environmental matters, corruption and influence peddling.

11 How are internal investigations viewed by local enforcement bodies in your country?

Internal investigations are a recent trend in Mexico. Mexican enforcement authorities welcome them when they are conducted with a legitimate and serious purpose. Although not required by law, a company can benefit by conducting an internal investigation and co-operating with the enforcement authorities in the prosecution of potential criminal offences or infringements committed by the company’s employees or by the company itself. That is to say, an internal investigation can allow a company to prove to the authorities that it has acted diligently and in good faith to try to understand, contain, mitigate and remediate an issue that could potentially result in criminal conduct or an administrative liability.

Further, using the results of an internal investigation, a company can improve its control processes and compliance functions, and implement preventative measures to prevent future infringements. Some law enforcement authorities may even provide ‘legal benefits’ to a company that has an internal compliance department focusing on the prevention of criminal conduct. For example, article 11 of the Federal Criminal Code allows for a reduction in criminal liability of up to one-quarter of the penalty provided under article 422 of the Criminal Procedures National Code (liability of corporations) provided that the corporation can prove that, before the commission of the conduct for which the company is being accused, it had a compliance department in charge of preventing criminal conduct and that before or after being accused, it sought to mitigate the damage caused by the adduced conduct.

Before an internal investigation

12 How do allegations of misconduct most often come to light in companies in your country?

It depends on the company, but allegations of misconduct most often come to light by means of:

  • due diligence processes (in the context of merger and acquisition transactions);
  • internal and external audits;
  • whistleblower programmes;
  • private complaints or litigation (when filed against a company or its employees); or
  • activity reports to a company’s appointed directors and officers.

13 Does your country have a data protection regime?

Yes. Articles 6 and 16 of the Mexican Constitution provide for a data protection regime in Mexico. The regulatory laws of this regime are the Federal Law for the Protection of Personal Data Held by Private Parties and the General Law for the Protection of Personal Data Held by Regulated Institutions.

14 How is the data protection regime enforced?

The National Institute of Transparency, Information Access and Protection of Personal Data enforces the data protection regime discussed in question 13. The main objective of the data protection regime is to ‘protect the personal data of individuals and companies, with the sole purpose of regulating its legitimate, controlled and informed treatment to secure the privacy and the right of informed self-determination of the people involved’.

15 Are there any data protection issues that cause particular concern in internal investigations in your country?

The data protection regime involves the protection of ARCO rights (i.e., the right of access, rectification, cancellation and opposition), which afford an individual the rights to access their personal data; to be made aware of the origin of the data and executed or anticipated transfers of their data to third parties; to rectify errors within their data; to cancel their data when it is held in a manner inconsistent with the law, or when it is no longer needed; and to oppose the use of their data by third parties for any type of processing.

Given the technical nature of the collection of data within internal investigations, companies should protect these ARCO rights and be particularly mindful of sensitive data about employees regarding such information as racial origins, ethnicity, health issues and sexual preferences. Privacy notices and consent forms may be required.

16 Are search warrants or dawn raids on companies a feature of law enforcement in your country? Describe any legal limitations on authorities executing search warrants or dawn raids, and what redress the company has if those limits are exceeded.

Yes, in relation to criminal matters. Under Article 16 of the Mexican Constitution:

  • a judicial authority must order the search warrant;
  • it must be limited to a specific place, date and time;
  • the object of the search must be strictly specified;
  • a probable cause shall be justified; and
  • the search must be executed in the presence of two witnesses.

If the aforementioned conditions are not met, all the evidence obtained by the authority by means of the search warrant is inadmissible at trial. Additionally, although there is no automatic redress, a subject company may be able to seek pecuniary penalties from the state and administrative penalties against the authority that exceeded the limits of the search warrant.

Dawn raids are also used by Mexican law enforcement regulators. In recent years, dawn raids have become a particularly invasive feature of antitrust investigations, because there is no injunction available to corporations to effectively defend against the seizure of information by the authorities. In certain cases, the authorities have entered corporations’ offices to collect all sorts of data, both electronic and hard copy, for the purposes of their investigations.

17 How can privileged material be lawfully protected from seizure during a dawn raid or in response to a search warrant in your country?

There is no specific protection a party could enforce against the seizure of privileged material before a dawn raid or search warrant is executed. However, there is precedent in the context of antitrust investigations, whereby if the Antitrust Commission collects privileged material in an antitrust investigation, it has the obligation to immediately set it apart and exclude it from the investigation. Future cases will have to define the scope of what is covered under this privilege exclusion.

18 Are there any privileges in your country that would prevent an individual or company from providing testimony? Under what circumstances may an individual’s testimony be compelled in your country? What consequences flow in your country from such compelled testimony?

The Mexican Constitution provides that there is a human right against self-incrimination. Under this right, the defendant cannot be compelled in any criminal case to testify against his or her own interests. This right can be extended to administrative investigations. However, testimony may be compelled from witnesses in possession of facts relevant to the subject matter of an investigation. The general rule is that anyone with knowledge of relevant facts to an investigation being conducted by the authorities has an obligation to testify. The primary exception flows from the privilege that covers what Mexican law calls ‘professional secrecy’. This covers professions in which a client has an expectation of privacy from the service provider, such as an attorney, a doctor or a psychologist.

19 What legal protections are in place for whistleblowers in your country?

The idea of whistleblower protection programmes is relatively new in Mexico and there are very few legal provisions that incorporate protection programmes. The main example is the ‘immunity programme’ foreseen in article 103 of the Federal Economic Competition Law, which provides that any competitor involved in absolute monopolistic practice may make a request to the Federal Economic Competition Commission for a reduction in an administrative fine, which could be as much as 100 per cent, or up to 50 per cent, 30 per cent or 20 per cent depending on the timing of the request as compared with other competitors. If applicable, the Federal Economic Competition Commission will keep the identity of the competitor confidential.

There is no provision for a whistleblower protection programme under either criminal or administrative law.

20 What rights do employees possess under local employment law that determine how they are treated within a company if their conduct is within the scope of an investigation? What employment rights would attach if they are deemed to have engaged in misconduct? Does it differ for officers and directors of the company?

Under Mexican employment law, there are no specific rights that enable employees to determine how they should be treated during an investigation. However, while conducting an investigation, best practice for an employer should involve:

  • providing the employee with a fair opportunity to challenge the allegations being brought against him or her;
  • making findings based on objective criteria and evidence; and
  • informing the employee of the right to have his or her own counsel and that the interviewing counsel represents the company, not the employee.

Sensitive personal data uncovered during the internal investigation must also be protected. An employer should check the content of its privacy notices regarding the processing of information about employees and ensure that it is consistent with statutory processing conditions.

The officers and directors of a company have the same rights as any other employee. However, ‘trusted employees’ may be treated differently in that an employer’s loss of confidence in a trusted employee is sufficient ground for dismissal of that employee.

21 Are there disciplinary or other steps that a company must take in your country when an employee is implicated or suspected of misconduct, such as suspension or in relation to compensation? Can an employee be dismissed for refusing to participate in an internal investigation?

When an employee’s alleged misconduct is found to be grounded, the employer may terminate the employment relationship without liability. However, grounds for dismissal follow strict scrutiny and will be interpreted at all times in favour of the employee. Article 517 of the Federal Labour Law provides that an employer has one month to terminate an employee’s employment or to discipline the employee, starting from the moment the employer becomes aware of the misconduct.

If an employee refuses to participate in an internal investigation, and the employment contract obliges him or her do so, the employee could be dismissed with cause. However, if an employment contract does not provide that the employee is obliged to co-operate in internal investigations, the employer is unlikely to be able to dismiss the employee for lack of co-operation.

Commencing an internal investigation

22 Is it common practice in your country to prepare a document setting out terms of reference or investigatory scope before commencing an internal investigation? What issues would it cover?

Yes. Such a document would typically include:

  • the nature of the investigation;
  • the people who will conduct the investigation;
  • retention of external support if necessary (external lawyers or external auditors);
  • the applicable law during the investigation (data protection, labour rights, criminal, etc.);
  • an estimated timeline for the investigation;
  • key individuals in the facts under review;
  • identification of the databases in which the relevant information may be supported; and
  • the individuals who will be subject to interviews or a review of documents.

23 If an issue comes to light prior to the authorities in your country becoming aware or engaged, what internal steps should a company take? Are there internal steps that a company is legally or ethically required to take?

Pursuant to article 222 of the Criminal Procedures National Code, ‘any individual who is aware of an act that may constitute a crime is compelled to report it to the Public Ministry, or to any police officer if the matter is urgent . . . if any individual fails in this legal duty, he or she will be liable to the corresponding sanctions’. However, the term ‘corresponding sanctions’ is not defined in the Code. Under the Mexican Constitution, authorities cannot impose penalties if they are not expressly established in law. The aforementioned article 222 does not provide a specific prison or monetary sanction. Therefore, although companies have a statutory obligation to report facts that may constitute a crime, non-compliance with this obligation will not necessarily carry sanctions.

24 At what point must a company in your country publicly disclose the existence of an internal investigation or contact from law enforcement?

There is no obligation binding a company to publicly disclose the fact that an internal investigation is being carried out, other than article 105 of the Securities Market Law, which provides that entities registered on the Mexican Stock Exchange must publicly disclose ‘relevant events’ that may affect the price of their registered stocks.

25 When would management typically brief the board of a company in your country about an internal investigation or contact from law enforcement officials?

The precise timing will vary from case to case and will depend on the potential outcome of the investigation on the company’s ongoing business. The board of directors usually becomes aware of an investigation once its scope is clearly defined, the facts have been established and findings are well grounded in evidence and there is a visible strategy to mitigate damages and execute remedial actions. Therefore, once all these elements are established, the findings are compiled in a report, so that the board of directors can make decisions that are appropriate to the results. However, if it is apparent that in an internal investigation the alleged misconduct could have severe implications for the company, management may brief the board of directors even before the investigation begins. As regards the briefing of a board of directors by law enforcement officials, the timing would depend on the seriousness of the conduct being investigated.

26 What internal steps should a company in your country take if it receives a notice or subpoena from a law enforcement authority seeking the production or preservation of documents or data?

  • Identify the facts that led to the authority’s claim.
  • Find and preserve the corresponding data.
  • Analyse whether the request for production of documents is valid pursuant to the applicable laws.
  • Provide protective measures for sensitive data relating to the company’s operations or employees.
  • Review the requested data to determine any possible legal consequences.
  • Prepare a legal defence regarding any possible legal consequences to which the company might be subject, in order to mitigate risks, when applicable.

27 How can the lawfulness or scope of a notice or subpoena from a law enforcement authority be challenged in your country?

It would depend on the law enforcement authority involved, and on the remedies provided under the applicable laws. Examples of legal remedies against the lawfulness of a notice are ancillary claims, appeals and amparo constitutional review actions.

Attorney–client privilege

28 May attorney–client privilege be claimed over any aspects of internal investigations in your country? What steps should a company take in your country to protect the privilege or confidentiality of an internal investigation?

Yes, attorney–client privilege may be claimed over communications exchanged between counsel and his or her client. This criterion has been developed only recently in Mexican law: in an antitrust investigation, the Mexican Supreme Court held that the privilege covers communications between a client and its external counsel. In judicial terms, ‘communication’ is understood to refer to all information exchanged and thus refers to both spoken or written communications (e.g., oral conversations, emails) or work-product (such as written notes, memorandums).

The steps needed for this privilege to attach are that there shall be a contractual relationship between the client and its external counsel, and that there is evidence to prove that the work-product arguably protected is related to the contract between the client and its counsel.

29 Set out the key principles or elements of the attorney–client privilege in your country as it relates to corporations. Who is the holder of the privilege? Are there any differences when the client is an individual?

Rather than a specific attorney–client privilege, there is a general obligation in Mexico for all professionals, including attorneys, to maintain professional secrecy. In the legal profession, this involves both a right and a duty: a right to refuse to disclose information about a client; and a duty not to testify, produce documents or disclose any information against a client’s interests. Lawyers cannot be compelled to testify against their clients.

The holder of the attorney–client privilege in Mexico is, as a general rule, the client, and sometimes the attorney himself or herself, depending on the specific case and the interests involved.

30 Does the attorney–client privilege apply equally to in-house and external counsel in your country?

In a recent case dealing with this issue in the realm of antitrust law, the Supreme Court held that the privilege attaches only with regard to external counsel.

31 To what extent is waiver of the attorney–client privilege regarded as a co-operative step in your country? Are there any contexts where privilege waiver is mandatory or required?

It is not necessary to waive the attorney–client privilege as part of your co-operation with the authorities. On the other hand, counsel has a fiduciary duty towards his or her client to preserve the secrecy behind the privilege.

32 Does the concept of limited waiver of privilege exist as a concept in your jurisdiction? What is its scope?

No. However, a client may waive the attorney–client privilege if the waiver satisfies the requirements provided under articles 6 and 7 of the Federal Civil Code that the waiver:

  • does not affect public policy or third parties’ interests; and
  • is done in clear and precise terms, in such a way that leaves no doubt as to the waiving party’s intention to waive.

33 If privilege has been waived on a limited basis in another country, can privilege be maintained in your own country?

Generally, if the privilege was waived in another country and the waiver was done in a manner that fulfils the Mexican law requirements referred to in question 32, the privilege will be considered waived in Mexico as well.

34 Do common interest privileges exist as concepts in your country? What are the requirements and scope?

There is no specific concept of common interest privileges in Mexico. However, there are other recognised privileges under Mexican law, such as banking secrecy and tax secrecy.

35 Can privilege be claimed over the assistance given by third parties to lawyers?

Yes. When a third party is providing assistance to a lawyer, there can be an independent privilege of professional secrecy between the lawyer and the third party. If the assistance provided by a third party is connected to the relationship between the lawyer and his or her client, that assistance would also be protected by the attorney–client privilege. Best practice is for external counsel to retain third parties directly and thus secure preservation of this privilege.

Witness interviews

36 Does your country permit the interviewing of witnesses as part of an internal investigation?

Yes, as there is no legal provision that prohibits such interviews.

37 Can the attorney–client privilege be claimed over internal witness interviews or attorney reports in your country?

Yes, attorney–client privilege will cover an attorney’s work-product if the preparation of the work-product was consistent with the attorney’s retention agreement and the discharge of his or her fiduciary duties towards the client.

38 When conducting a witness interview of an employee in your country, what legal or ethical requirements or guidance must be adhered to? Are there different requirements when interviewing third parties?

There are no laws setting out particular requirements regarding a witness interview of an employee. However, best practice would include:

  • informing the employee that the attorney represents only the company and not the employee individually;
  • making the employee aware of the right to have one’s own representation;
  • explaining the purpose and of the interview and the allegations that are being investigated;
  • warning the employee that lying or omitting information could constitute illicit conduct; and
  • asking the witness if he or she was aware of the company’s integrity policies.

Similar requirements apply when interviewing third parties.

39 How is an internal interview typically conducted in your country? Are documents put to the witness? May or must employees in your country have their own legal representation at the interview?

An internal interview will often include the following:

  • discussing the background of the interviewee;
  • explaining of the nature of the investigation;
  • asking the witness about the facts being investigated;
  • putting to the witness relevant documents found during the course of the investigation and requesting an explanation from the witness; and
  • listening to the witness’s clarifications and explanations.

As mentioned in question 38, witnesses have the right to have their own legal representation during the interview. However, no statute or law mandates that the company provides a lawyer for witnesses or employees being interviewed.

Reporting to the authorities

40 Are there circumstances under which reporting misconduct to law enforcement authorities is mandatory in your country?

It is mandatory pursuant to article 222 of the Criminal Procedures National Code. However, as discussed in question 23, there is no sanction for non-compliance with this ‘obligation’.

41 In what circumstances might you advise a company to self-report to law enforcement even if it has no legal obligation to do so? In what circumstances would that advice to self-report extend to countries beyond your country?

Voluntary reporting may be advisable if failing to report could result in more severe consequences for the company and self-reporting could be used as a defence measure to make a request to the relevant law enforcement authority (national or international) for a reduction in sanctions.

42 What are the practical steps you need to take to self-report to law enforcement in your country?

  • Identify the law enforcement authorities to which the company should self-report.
  • Identify the legal consequences the company may face after self-reporting.
  • Prepare the findings and seek evidence.
  • Willingly co-operate with the law enforcement authorities during the course of their investigation.
  • Seek penalty reductions for co-operating parties.

Responding to the authorities

43 In practice, how does a company in your country respond to a notice or subpoena from a law enforcement authority? Is it possible to enter into dialogue with the authorities to address their concerns before or even after charges are brought? How?

Companies may engage in a dialogue with the authorities and opt to co-operate in their investigation to try to seek a reduction of sanctions. Criteria that are taken into account by the authorities are that the co-operating party is the first to co-operate (assuming there are several parties in the investigated scheme), that it provides meaningful evidence to the authorities, that it co-operates continuously with the authorities, and that it suspends its participation in the scheme. Once an authority brings charges against a company, as a general rule, the company may enter into a dialogue to address the authority’s concerns.

44 Are ongoing authority investigations subject to challenge before the courts?

Yes. They can be challenged using legal remedies provided by procedural law governing the relevant law enforcement authority (e.g., contentious administrative proceedings or nullity trial) or by constitutional remedies (e.g., constitutional review amparo claims).

45 In the event that authorities in your country and one or more other countries issue separate notices or subpoenas regarding the same facts or allegations, how should the company approach this?

As a general rule, the best practice will be for companies to seek to negotiate a consistent disclosure package between the various countries issuing notices or subpoenas.

46 If a notice or subpoena from the authorities in your country seeks production of material relating to a particular matter that crosses borders, must the company search for and produce material in other countries to satisfy the request? What are the difficulties in that regard?

Typically, a company will be required to search for and produce all evidence responsive to the subpoena, even when that evidence is outside Mexico. This issue often arises in investigations relating to bribery of foreign officials, as, although the underlying conduct occurs in other jurisdictions, the conduct is prosecutable in Mexico. Difficulties may arise when responsive evidence exists in a foreign jurisdiction, but production of the evidence in response to the subpoena would violate that jurisdiction’s confidentiality laws. However, Mexico has multilateral co-operation agreements with several countries that enable authorities to formulate direct requests to obtain evidence that exists abroad.

47 Does law enforcement in your country routinely share information or investigative materials with law enforcement in other countries? What framework is in place in your country for co-operation with foreign authorities?

Yes, Mexico has signed bilateral international treaties under which the parties agree to provide mutual assistance to law enforcement authorities from the signatory countries when requested. Several laws in Mexico include provision relating to international co-operation; however, the most relevant laws are the Federal Procedure Civil Code, the Mexican Commerce Code and the Criminal Procedures National Code (for co-operation in criminal matters).

48 Do law enforcement authorities in your country have any confidentiality obligations in relation to information received during an investigation or onward disclosure and use of that information by third parties?

Yes, under article 113, section XI of the General Law of Transparency and Access to Public Information, judicial and administrative files are kept confidential until a final ruling of the matter has been made. Personal information contained in such files are confidential and can never be disclosed.

Furthermore, under article 106 of the National Criminal Procedure Code, authorities cannot disclose confidential information regarding the personal data of the defendant or any related individual, or share information with third parties. Personal information contained in such files is confidential and can never be disclosed, except to a party involved in the proceedings.

49 How would you advise a company that has received a request from a law enforcement authority in your country seeking documents from another country, where production would violate the laws of that other country?

The advice would be to:

  • state and demonstrate that the production of such documents would violate the law of the foreign country; or
  • state that by producing the documents, the company might be subject to the penalties provided by the foreign law.

Accordingly, it would be ‘legally impossible’ to perform the object of the request.

50 Does your country have blocking statutes? What related issues are implicated by complying with a notice or subpoena?


51 What are the risks in voluntary production versus compelled production of material to authorities in your country? Is this material discoverable by third parties? Is there any confidentiality attached to productions to law enforcement in your country?

When a company produces material voluntarily, it has greater latitude to decide what information to give to the authorities. When compelled, the authorities specify the documents and information that have to be provided, and therefore the company can face sanctions if it fails to comply.

As general rule, material – whether produced voluntarily or compelled – is not discoverable by third parties.

With regard to confidentiality, all types of documents and evidence provided to an authority by an individual are confidential and can only be disclosed to the parties involved in the proceedings. Once the courts enter their corresponding judgments, only the judgment will be published and all private information about the parties (such as their identities) is often redacted. Under article 70 of the General Law of Transparency and Access to Public Information, all the Mexican law enforcement authorities shall publish ‘all resolutions and judgments rendered in processes followed in a manner of trial’. However, article 73 provides that the law enforcement authorities shall publish ‘only the public versions of the judgments that are considered to be of public interest’. Thus, at least in Mexican law, the publication of judgments refer only to the courts’ discretion.

Global settlements

52 Prior to any settlement with a law enforcement authority in your country, what considerations should companies be aware of?

Before entering into a settlement with a law enforcement authority, companies should consider:

  • the applicable law that would regulate the procedure that allows the application of a settlement agreement;
  • the possible legal consequences that the settlement may bring to the company (regarding civil, commercial, criminal and administrative matters);
  • the possible legal consequences faced by the company’s directors, officers and employees; and
  • the extent to which the settlement agreement would mitigate the most risks and consequences for the company.

53 What types of penalties may companies or their directors, officers or employees face for misconduct in your country?

Pursuant to article 422 of the National Code of Criminal Proceedings, the penalties that a company can face for engaging in misconduct include:

  • fines;
  • confiscation of the instruments used in committing the misconduct;
  • disgorgement;
  • publication of the judgment;
  • suspension of activities;
  • dissolution of the company;
  • closing down the company’s business establishments;
  • a ban on any future execution of the types of activities the exercise of which resulted in the misconduct;
  • temporary disqualification – for an established period of time – from participating, directly or through a representative, in public contracting procedures such as public bids and government contracts;
  • judicial intervention to safeguard the rights of workers or creditors (i.e., the imposition of a government-controlled trustee to remove the company’s management so as to halt the alleged crime); and
  • public warnings.

Additionally, the directors, officers and employees can be individually responsible for the misconduct and may be punished with a penalty as provided under article 24 of the Federal Criminal Code, which include:

  • imprisonment;
  • community service;
  • a ban on attending certain places (as determined by the facts of the case);
  • fines and fees;
  • suspension or deprivation of rights;
  • disqualification, dismissal or suspension of functions; or
  • a requirement to wear a tracking or surveillance device.

54 What do the authorities in your country take into account when fixing penalties?

Pursuant to article 410 of the Criminal Procedures National Code, the court shall consider (1) the severity of the crime and (2) the criminal liability of the offender.

The severity of the crime is determined by the value of the legally protected interest, its consequences, the nature of the conduct (wilful or negligent), the means employed, the circumstances of time, mode and place of the event, and the intervention of the defendant.

To determine the criminal liability of the defendant, the court shall consider the circumstances of the event and the wilfulness of the defendant in committing the crime.

55 Are non-prosecution agreements or deferred prosecution agreements available in your jurisdiction for corporations?

Yes, pursuant to article 256 of the Criminal Procedures National Code, once an investigation begins, the offender can request that the prosecution authorities refrain from instituting a criminal prosecution based on the application of ‘opportunity criteria’, as long as the damage caused to the victims has been repaired or guaranteed.

These ‘opportunity criteria’ are only applicable in the scenarios set forth under article 256 of the Criminal Procedures National Code. The ‘opportunity criteria’ may apply:

  • when the crime is not punishable by imprisonment, when it has an alternative penalty or when the jail penalty does not exceed five years, as long as the crime did not involve the use of violence;
  • in the case of white-collar crimes committed without violence;
  • if the defendant suffered serious damage as a consequence of the crime;
  • if the penalty that could be imposed would lack relevance considering another judgment already imposed or that could be imposed;
  • if the accused party provides essential and effective information for the prosecution of a more severe crime than the one attributed to the accused party, and the accused party agrees to testify; or
  • if criminal prosecution would be disproportionate or unreasonable considering the causes or circumstances surrounding the commission of the crime.

It is common for the prosecution authorities in Mexico to apply one of the ‘opportunity criteria’ when it is advantageous to the offender, the victim and the authorities. The possible advantages include (1) fast and effective repair of damage to the victim, (2) no prison penalty, (3) co-operation in the prosecution of more severe crimes, and (4) redress of the damage caused by the crime.

56 Is there a regime for suspension and debarment from government contracts in your country? Where there is a risk of suspension or debarment or other restrictions on continuing business in your country, what are the options available to a corporate wanting to settle in another country?

Yes. Under article 81 of the General Law of Administrative Responsibilities, companies that perform unlawful acts (e.g., bribe, influence peddling, use of false information, collusion, misuse of public resources) are subject to the following penalties:

  • temporary disqualification from participating in government contracts for a specified period of between three months and 10 years;
  • suspension from continuing with business activities for a specified period of between three months and three years; or
  • dissolution of the legal entity.

If a company wishes to settle in another country, for that settlement to have effect in Mexico it must be agreed with the Mexican authorities. The General Law of Administrative Responsibilities offers benefits for self-reporting companies, including being spared debarment. Thus, it may be advisable for companies that rely on government contracts to self-disclose and seek leniency from the administrative authorities.

The same principle applies under criminal law. Self-disclosure may bring benefits to the co-operating culpable party provided that it satisfies certain conditions, among which remediation for the damage caused is paramount.

57 Are ‘global’ settlements common in your country? What are the practical considerations?

Global settlements are not common. However, Mexico has signed international treaties and co-operation agreements with certain countries providing for mutual assistance in criminal, civil and tax matters that may lead to a similar kind of settlement.

58 Are parallel private actions allowed? May private plaintiffs gain access to the authorities’ files?

Yes. Therefore, a defendant may be prosecuted for a criminal act and, at the same time, for a civil claim regarding the same actions.

Private plaintiffs can only gain access to the authorities’ files if they are a party to the specific proceeding to which the plaintiffs are seeking access, or if a court requests the authority to produce its files.

Publicity and reputational issues

59 Outline the law in your country surrounding publicity of criminal cases at the investigatory stage and once a case is before a court.

Under section XII of article 113 of the General Law of Transparency and Access to Public Information, criminal investigations undertaken by the public prosecutor are classified. Thus, this information will not be public unless the court discloses it.

Also, article 5 of the Criminal Procedures National Code provides that all hearings must be public. However, there are exceptions regarding publicity about criminal hearings, for example if the publicity affects the integrity of any of the parties or public security.

60 What steps do you take to manage corporate communications in your country? Is it common for companies to use a public relations firm to manage a corporate crisis in your country?

Yes, in complex litigation and in scenarios involving serious crises that affect companies’ reputation, there is a common practice of retaining public relations firms to manage these situations. Public perception will often have an influence on how the authorities view a case and will guide how they interpret public policy in reaching their decision.

61 How is publicity managed when there are ongoing, related proceedings?

Ongoing proceedings are confidential until the issuance of the final judgment (except for personal data, which is generally not disclosed even after a final judgment). Nevertheless, there is often media attention surrounding high-profile cases, particularly with regard to matters of interest to the general public. Sometimes the parties to the proceedings provide information themselves to the media, and even the extent of the conflict itself is publicised. Moreover, it is not uncommon for information about high-profile cases to be leaked to the press and thus become public. Depending on the nature of the case, a party involved in a complex litigation or investigation may attempt to use the media to generate positive public opinion about the merits of its arguments.

Duty to the market

62 Is disclosure to the market in circumstances where a settlement has been agreed but not yet made public mandatory?

As general rule, there is no obligation to disclose settlements to the market. Article 105 of the Securities Market Law provides that companies registered on the Mexican Stock Exchange must disclose ‘relevant events’. A settlement could be interpreted as a relevant event if, for example, if it could affect the share price.


Diego Sierra is a partner at Von Wobeser y Sierra, SC.

Unlock unlimited access to all Global Investigations Review content