State Guide
New Mexico Privacy & Data Security Laws
Every statute below can apply to a business handling New Mexico residents' data, depending on your revenue, the number of New Mexico consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Data Security & Breach Notification · 1
Requires notifying affected residents (and often the state AG/regulator) after a breach of unencrypted personal information such as SSNs, driver's license/state ID numbers, or financial account numbers. Applies regardless of company size whenever you hold covered personal information about a resident of this state.
On the Horizon — Proposed, Not Yet Law · 1
Would be one of the strictest state privacy laws nationally if enacted, given its low threshold and private right of action — worth monitoring closely if you operate in New Mexico.
Status: Introduced in the 2026 session with an unusually low proposed threshold (15,000+ consumers) and a private right of action ($2,500–$7,500 per violation) — an aggressive bill by national standards. Final pass/fail status of the 2026 session was not confirmed.