New Mexico is at a pivotal moment in its data privacy journey. While the state doesn't yet have a comprehensive consumer data privacy law on par with California or Colorado, multiple bills are advancing through the legislature, and existing laws provide important protections. Here's what New Mexico residents need to know about their privacy rights in 2026 — and what's coming next.
Current Privacy Protections in New Mexico
Although New Mexico lacks a single comprehensive privacy statute, several existing laws protect residents' personal information:
Data Breach Notification Act
New Mexico's Data Breach Notification Act requires businesses and government agencies to notify affected individuals when a security breach exposes their personal identifying information. This includes Social Security numbers, driver's license numbers, account numbers, and biometric data.
Internet Privacy and Safety Act
New Mexico's Internet Privacy and Safety Act addresses online privacy concerns, with the state Department of Justice required to promulgate implementation rules by April 1, 2026. This law provides a framework for addressing online privacy violations, though its scope is narrower than comprehensive state privacy laws.
Children's Online Privacy
New Mexico has been particularly active in protecting children online. The state has pursued enforcement actions against companies that collect children's data without proper consent, including high-profile cases against social media platforms.
Proposed: The Consumer Information and Data Protection Act (HB 410)
Introduced in the 2025 legislative session, HB 410 would create comprehensive data privacy protections for New Mexico residents, including the right to access, correct, delete, and port personal data, as well as the right to opt out of data sales and targeted advertising. If passed, it would bring New Mexico in line with states like Virginia and Colorado.
The CHISPA Bill: New Mexico's Bold Privacy Proposal
The Community Health & Information Safety & Privacy Act (SB 53), known as "CHISPA," represents New Mexico's most ambitious privacy legislation to date. Key features include:
- Low threshold: Applies to entities processing data from as few as 15,000 consumers — far below the 100,000-consumer threshold used in most other states
- Broad coverage: Addresses the collection of health concerns, family information, location data, and financial status
- Strong consumer rights: Modeled partly on California's CCPA, giving residents robust control over their data
- Focus on vulnerable communities: Specifically designed to protect New Mexican communities from data exploitation by large corporations
Industry groups have raised concerns that CHISPA departs from established privacy frameworks adopted by 20+ other states, but community advocates argue that stronger protections are needed precisely because existing frameworks haven't adequately addressed corporate data collection.
No Comprehensive Law Yet
As of May 2026, New Mexico still lacks a comprehensive consumer data privacy law. This means residents have fewer legal tools to force data brokers to remove their information compared to states like California, Oregon, or Connecticut. However, this is likely to change as privacy legislation continues to advance.
What Data Brokers Know About New Mexico Residents
Even without a comprehensive privacy law, data brokers collect and sell extensive information about New Mexico residents. Common sources include:
- Property records: County assessor and clerk records in New Mexico are publicly available and widely scraped
- Court records: New Mexico Courts Case Lookup provides online access to many court records
- Voter registration: New Mexico voter files are available to political parties, candidates, and some researchers
- Business filings: Secretary of State business registrations are public
- Utility connections: Moving and connecting utilities can trigger data broker listings
This data ends up on sites like Spokeo, BeenVerified, WhitePages, TruePeopleSearch, Intelius, Radaris, and dozens of others.
How to Protect Your Privacy in New Mexico Today
Even without a comprehensive state law, you have options for protecting your personal data:
1. Use Federal Laws to Your Advantage
- Fair Credit Reporting Act (FCRA): You can dispute inaccurate information with credit bureaus and background check companies
- CAN-SPAM Act: Opt out of commercial emails
- Telephone Consumer Protection Act (TCPA): Register with the National Do Not Call Registry and report violations
2. Submit Opt-Out Requests Directly
Most data brokers accept opt-out requests regardless of which state you live in — it's too costly for them to verify residency for each request. Visit each broker's opt-out page, submit your removal request, and follow up to confirm deletion.
3. Lock Down Public Records
- Request that your voter registration information be restricted from commercial use through the Secretary of State's office
- Consider using a PO Box or virtual address for business filings
- Request address confidentiality through the Attorney General's Address Confidentiality Program if you are a victim of domestic violence, stalking, or sexual assault
4. Enable Privacy Tools
- Install Global Privacy Control (GPC) in your browser
- Use a VPN to mask your location and IP address
- Review and restrict privacy settings on all social media accounts
- Use email aliases for online signups
Why Automated Removal Matters More in New Mexico
In states with strong privacy laws, you have legal backing when a data broker ignores your request. In New Mexico, the lack of a comprehensive law means you're more reliant on the goodwill of data brokers and the general opt-out processes they offer. This makes automated, persistent monitoring even more valuable.
PrivacyOn helps New Mexico residents by:
- Continuously monitoring 100+ data broker sites for your personal information
- Automatically submitting and re-submitting removal requests on your behalf
- Providing dark web monitoring to alert you if your data appears in breaches
- Offering family plans for up to 5 people, starting at just $8.33/month
Without strong state-level enforcement, having a service that persistently follows up with data brokers ensures your information actually gets removed — and stays removed.
What's Ahead for New Mexico Privacy
The momentum is clearly building. With multiple bills in the legislature and growing public awareness of data privacy issues, New Mexico is likely to join the ranks of states with comprehensive privacy protections in the near future. When that happens, residents will gain stronger tools to control their personal data.
In the meantime, don't wait for the law to catch up — take proactive steps now to minimize your digital footprint and protect your personal information from data brokers.