Human Sense

SmartPresentation

Let's go!

Introduction

As future computer science professionals, there exists a responsibility for ethical use of the skills and abilities acquired during college. As people we must foster ethical principles to counter cybercrime, social inequality and risks associated with AI. This line of work is not neutral, every decision made impacts human dignity, justices, social inequality, and sustainability. With my experience working in the Formative Partner Organization, Kaapeh, I learned how digital tools can be useful and powerful tools when made and used responsibly, but also how easily a tool can be misused. Using international references like the ACM Code of Professional Ethics and the UNCESCO AI Ethics Recommendation, I propose the following code of ethics.

Continue

Code of ethics

Promotion of Sustainability in Computing

• Professionals must design eco-efficient systems to mitigate the environmental footprint of technology.
• ACM: 1.2 Avoid harm.
• UNESCO: 8. Sustainability, resilience, and environmental responsibility.

Accountability for Cybersecurity

• Professionals must anticipate, prevent, and respond to cyber threats, as negligence undermines public trust and stability.
• ACM: 2.9 Design secure systems.
• UNESCO: 2. Safety and security; 4. Collaborative governance.

Commitment to Education and Digital Inclusion

• Reducing Mexico’s digital divide requires promoting inclusive and accessible technologies.
• ACM: 1.1 Contribute to society and human well-being.
• UNESCO: Inclusion, fairness, and accessibility.

Respect for Human Dignity and Rights

• All systems must prioritize human rights, ensuring non-discrimination and the protection of minorities.
• ACM: 1.1 Contribute to society and human well-being; be fair and do not discriminate.
• UNESCO: Human rights and dignity.

Commitment to Privacy and Data Protection

• In a digital society, safeguarding personal data is fundamental to preserving freedom and security.
• ACM: 1.6 Respect privacy; 1.7 Honor confidentiality.
• UNESCO: Privacy and data protection.

Integrity and Transparency in Algorithms

• Systems should be auditable, explainable, and designed to avoid hidden manipulation.
• ACM: 1.3 Be honest and trustworthy; disclose system limitations.
• UNESCO: Transparency, explainability, and human oversight.

Continue

Code of ethics

Respect for Intellectual Property and Innovation

• Innovation thrives when ideas are protected, but plagiarism and piracy undermine trust and progress.
• ACM: 1.3 Be honest and trustworthy; respect others’ rights.
• UNESCO: Cultural values and fairness.

Professional Competence and Lifelong Learning

• Given the speed of technological change, continuous updating of skills ensures ethical and safe practices.
• ACM: 2.2 Maintain professional competence.
• UNESCO: 9. Education, awareness, and capacity-building.

Avoidance of Malicious Use of AI and Systems

• Professionals must reject participation in the creation of tools for cybercrime, disinformation, or abusive surveillance.
• ACM: 1.2 Avoid harm; do not misuse computing skills.
• UNESCO: Prevent harmful use of AI.

Collaboration for the Common Good

• Sharing knowledge and strengthening collective efforts enhances Mexico’s resilience and well-being.
• ACM: 3.2 Promote the public good; improve quality of life.
• UNESCO: Cooperation, solidarity, and peace.

Continue

Comparative Analysis with the EU Framework

Continue

Continue

A great title

The European Union’s framework is the NIS2 Directive, which offers a robust, integrated model for cybersecurity. Comparing both Mexico’s and the EU’s legal framework we can see first that Mexico’s cybersecurity legal framework is fragmented, reactive, and sector-specific. It lacks unity or national strategy that mandates obligations to both public and private sectors, and it lacks unity because legal provisions are scattered across Federal Penal Code, data protection laws, financial regulations, and telecommunications statutes, which make the framework inconsistent, lack coordination and inadequate for emergencies.

In comparison, the NIS2 Directive is cohesive and risk-based, it calls to adopt national cybersecurity strategies, designate competent authorities and entities are legally obligated to implement risk management measures, have strict timeframes and ensure security.

Analysis of the 2024 Bill

Continue

The 2024 Ley General de Ciberseguridad aimed to consolidate Mexico’s cybersecurity laws and create a national authority, like the EU's NIS2 Directive. This bill introduced basic definitions of cyber threats and emphasized the need for a national strategy.

Some strengths this bill had were, the recognition of cybersecurity as a priority nationally, the proposal for a centralized authority for cybersecurity and the initial classification of cybercrimes. But it had limitations also, like omitting deepfake fraud and IoT-based attacks, there were also no mandatory obligations like the EU’s framework, it also had weak enforcement and it didn’t align with international standards.

Proposal

Continue

Objectives

Ensure accountability, transparency, and resilience

Promote public-private and international partnerships

Establish a unified, risk-based cybersecurity law.

Continue

Regulations

Cybersecurity Governance and Institutional

Cybercrime Classification

Expand definition of cybersecurity

Create a national cybersecurity authority: A decentralized body empowered to:

• Issue technical standards
• Conduct audits and impose sanctions
• Oversee compliance

Mandate a National Cybersecurity Strategy:

• Updated often
• Include threats analysis, priorities and budget allocations

Harmonize with EU NIS2 Directive

Continue

Regulations

Capacity and International Building

Public and Private Obligations

Enforcement

Define penalties for violating the framework

• Criminal penalties for intentional attacks
• Licenses suspensions

Create specialized courts

• Judges trained in international cyber law

Fund cybersecurity education

• Fund university programs and labs

Promote international cooperation

Mandatory incident reporting Enforce risk management protocols

Continue

Conclusions

Cybersecurity must be treated as a matter of national security, digital sovereignty, and human rights.

Mexico’s current cybersecurity laws are fragmented and outdated. The 2024 bill by Pérez and Espino was a step forward but lacks coverage of emerging threats, enforceable standards, and international alignment.

Continue

Bibliography

Estevez, J. C. A. (2024, April 9). Cybersecurity as a force bag in Mexico’s regulatory framework – Juan Carlos Arjona Estevez. CELE. https://observatoriolegislativocele.com/en/Cybersecurity-as-a-force-bag-in-Mexico%27s-regulatory-framework López, E. (2025, June 19). Cybersecurity as a Human Right: Mexico’s New Legal Framework for the Digital Age. Echeloncyber. Retrieved September 23, 2025, from https://echeloncyber.com/intelligence/entry/cybersecurity-as-a-human-right-mexicos-new-legal-framework-for-the-digital-age NIS2 Directive: securing network and information systems. (n.d.). Shaping Europe’s Digital Future. https://digital-strategy.ec.europa.eu/en/policies/nis2-directive The ACM Code of Ethics arose from the experiences, values and aspirations of computing professionals around the world, and captures the conscience of the profession. It affirms an obligation of computing professionals to use their skills for the benefit of society. (n.d.). https://www.acm.org/about-acm/code-of-ethics-in-spanish#h-3.3-administrar-el-personal-y-los-recursos-para-mejorar-la-calidad-de-la-vida-profesional. UNESCO. (2025). Ética de la inteligencia artificial. https://www.unesco.org/es/artificial-intelligence/recommendation-ethics Vela-Trevino, C., & Villanueva-Plasencia, D. (2025, June 17). Cybersecurity in Mexico: A Comprehensive overview. Connect on Tech. https://connectontech.bakermckenzie.com/cybersecurity-in-mexico-a-comprehensive-overview

Start