Mexico’s SEGOB Invests MX$343 Million in Biometric Data Security

Mexico's Ministry of the Interior is allocating up to MX$343 million to strengthen the infrastructure supporting the National Population and Identity Registry (RENAPO). The initiative seeks to improve the protection, administration, and availability of sensitive citizen data.

Mexico’s Ministry of the Interior (SEGOB) plans to invest up to MX$343 million (US$20 million) through 2028 to expand the operation and protection of data managed by the RENAPO, according to a public procurement process launched this month. The project covers the administration, storage, and operational support of one of the country's largest repositories of personal information, including CURP records and emerging biometric identity data.

The investment comes as RENAPO prepares for the broader adoption of biometric CURP records, which will serve as a central identification mechanism for citizens. According to the SEGOB, the selected provider must supply infrastructure capable of supporting the growing volume of identity data while meeting strict security, confidentiality, and business continuity requirements.

The procurement process reflects the increasing operational demands associated with managing biometric information at a national scale. It also signals rising public-sector spending on cybersecurity, data protection, and critical digital infrastructure as government agencies expand digital identity initiatives.

According to SEGOB's procurement documents, RENAPO currently generates approximately 112.9TB of information annually. The expansion of biometric identification systems is expected to increase storage, processing, monitoring, and security requirements across the platform.

The project also highlights the growing importance of geographic resilience in public-sector infrastructure planning. SEGOB requires the contracted data center to be located outside Mexico City, in a low-seismic-risk area and away from facilities considered high-risk, including fuel stations and refineries.

Security and Infrastructure Requirements

SEGOB has established a broad set of technical requirements designed to strengthen operational continuity and cybersecurity controls. The selected provider will be responsible for supporting an environment currently managed through approximately 12 servers and multiple large-scale storage systems. In addition, the company must maintain qualified personnel across several disciplines, including UNIX, Linux, and Windows server administration, virtualization, database management, infrastructure monitoring, backup and recovery operations, risk management, and personal data protection.

SEGOB also requires strict personnel governance measures. Every employee assigned to the project must sign confidentiality and non-disclosure agreements. Any staffing changes must be reported at least 15 days in advance, and the agency reserves the right to reject personnel who do not meet its requirements.

AI Adoption and Cybersecurity Monitoring

The procurement effort follows previous RENAPO modernization initiatives that incorporated cybersecurity automation requirements. A similar procurement process launched by RENAPO previously requested the use of AI technologies to help detect cyberattacks, identify unauthorized access attempts, and monitor bot-driven activity targeting government systems.

The latest modernization effort continues this approach by emphasizing proactive monitoring, data protection, and infrastructure resilience. These requirements align with broader trends across public institutions that increasingly rely on automation and AI-assisted security tools to manage growing volumes of sensitive information.

Industry observers view such projects as part of a broader shift toward continuous monitoring models that combine human oversight with automated threat detection capabilities. 

In  August 2025, SEGOB allocated up to MX$520 million (US$30.2 million) for computing services supporting RENAPO's infrastructure. Those resources are intended to strengthen database administration, data migration, cybersecurity controls, and operational management associated with biometric identity systems.

The modernization effort coincides with pilot deployments of biometric CURP programs in Mexico City and Estado de Mexico. As implementation expands nationally, government agencies will require larger storage environments, stronger cybersecurity controls, and more resilient infrastructure to support the growing volume of personal and biometric information.