What is Mexico’s Mandatory Disclosure Regime (MDR)? Download our guide

Mexico has introduced a new law that requires lawyers, accountants, bankers and tax advisers to proactively report certain tax transactions to the tax authorities. The Mexican law is part of an OECD initiative to combat tax evasion, known as BEPS Action 12, and is similar to the EU’s DAC6 regulation. Mexico’s mandatory disclosure law will be in force from January 2021, with a requirement to report historic data.

For Mexico, this means that businesses will need to review transactions that go as far back as January 2020. Businesses that start keeping track of transactions now will find it easier to report transactions when the mandatory disclosure law is in force in Mexico.

What is the Mexican Mandatory Reporting Regime (MDR)?

The OECD’s BEPS Action Plan recognises that one of the key challenges faced by tax authorities is a lack of timely, comprehensive and relevant information on potentially aggressive or abusive tax planning strategies. 

BEPS Action 12 provides recommendations for the design of rules to require taxpayers and advisors to disclose aggressive tax planning arrangements. These recommendations seek a balance between the need for early information on aggressive tax planning schemes with a requirement that disclosure is appropriately targeted, enforceable and avoids placing undue compliance burden on taxpayers.

Which authority is in charge of MDR in Mexico?

The Tax Administration Service (SAT) will issue the regulations applicable to the disclosures. The Ministry of Treasury and Public Credit (SHCP) will issue the thresholds regarding the minimum amounts needed to trigger the applicability of this new regime.

Download our guide to the Mexican MDR

Cover to the Mexican MDR guide

VinciWorks has created a comprehensive guide to the Mexican MDR. The guide covers:

  • Who is considered to be a tax adviser?
  • Who is required to report under the Mexican MDR?
  • When is a taxpayer not required to report?
  • What is and what isn’t considered to be a tax scheme?
  • What makes a transaction reportable?

Download guide

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”

Picture of James

James

VinciWorks CEO, VInciWorks

Spending time looking for your parcel around the neighbourhood is a thing of the past. That’s a promise.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.