Trust by Design: Mexico’s Digital ID and Data Security Shift

Mexico’s digital economy faces a turning point as companies expand financial technology, e-commerce, and data-driven services, forcing firms to invest in cybersecurity strategies. During the panel “Trust by Design: Digital ID, Security and the Future of Consumer Data in Mexico” at the Mexico E-commerce & Retail Summit 2026, industry leaders discussed how organizations must confront growing risks related to consumer data while building systems that allow innovation and trust to coexist.

Juan Martín Pampliega, CEO and Co-Founder, Muttdata, argued that fintech growth has increased exposure to sensitive information such as payment data, making security an operational requirement rather than a technical add-on. He said organizations must recalibrate their relationship with users as technologies evolve.

“Fintech companies must adapt to new technologies and rethink how we relate to consumers. We manage sensitive data such as payments, and it must be protected,” Pampliega said. “I have seen cases where information was captured without people giving their real consent.”

Albert González, eStore Operations Manager, Samsung Electronics, linked cybersecurity directly to e-commerce operations and organizational practices. “You cannot sell in e-commerce without efficient levels of information control,” González said. “How you obtain data, how you store it, and how you manage it defines the experience.”

He added that personal data regulated by law requires both internal awareness and consumer understanding. “Customers must know how personalization works and how their data is handled.”

Jesús de Ávila, CIO, Grupo Nazan, presented a practical framework based on three operational axes: governance, technical architecture, and operations. “This is not only a technology issue,” de Ávila said. “We created an interdisciplinary committee that meets monthly, built an inventory of sensitive data, and defined risk policies and contextual clauses.”

He explained that the company implemented a zero-trust architecture supported by key controls and observability systems. Operational resilience has become essential for retail environments that must continue functioning during incidents. “For this to work, culture is decisive. We run simulations and integrate security from the design stage. That allows retailers in Mexico to continue innovating.”

Cybersecurity as an Investment

Panelists emphasized that companies must move away from viewing cybersecurity as a reactive expense. De Ávila argued that security should be embedded into product development and aligned with business outcomes.

“Cybersecurity is no longer a cost. It is an investment aligned with return on investment. It moves from compliance to competitive differentiation.” Grupo Nazan has implemented real-time monitoring tools across retail operations to protect data across all channels, incorporating cybersecurity into the business case itself.

Pampliega added that many organizations underestimate the value of cybersecurity data. “Data clean rooms allow retailers or banks to share information in encrypted environments without transmitting personal data, which enables monetization without creating privacy risks.”

The panel identified reusable authentication systems and digital wallets as key developments shaping Mexico’s digital ecosystem. De Ávila noted that tokenized authentication reduces checkout friction while lowering fraud risk. “Wallets allow reusable authentication. Transactions become faster and safer.”

He added that high mobile penetration and widespread banking access position Mexico for rapid adoption. “More than 90% of people over age 12 have a mobile phone, and about 80% have some banking relationship. That places Mexico in a leading position in Latin America.”

González described wallets as tools that identify users through tokens rather than names, enabling loyalty programs and rewards systems while limiting exposure of personal identity. Pampliega concluded that implementation will require sustained commitment.

“There is a large investment ahead, not only financially but also in time and organizational priority. In three to five years, many of these security tools will become standard. Trust grows when customers decide what data to share and receive value in return.