Isabel Davara

Data Protection and Privacy; Digital Law, Technology and Innovation; Cybersecurity and Incident Response; Artificial Intelligence Governance and Algorithmic Regulation; FinTech and Digital Financial Services; International Data Transfers; Electronic Contracting and Digital Evidence; Digital Advertising and Telecommunications; Regulatory Investigations and Privacy Litigation.

Founding and Managing Partner, Davara Abogados – Mexico City, Mexico | 2005–Present

Attorney admitted to practise in Mexico and Spain, with over 20 years of experience in digital law, privacy, data protection, technology, cybersecurity, FinTech and artificial intelligence governance.

American Bar Association (ABA).

American Chamber of Commerce in Mexico (AmCham) — Privacy Champion.

Confederación Patronal de la República Mexicana (COPARMEX).

International Association of Privacy Professionals (IAPP).

International Association of Lawyers (UIA).

International Chamber of Commerce — Mexico Chapter (ICC Mexico); Vice President, Digital

Economy Commission.

Ilustre Colegio de Abogacía de Madrid (INCAM-Madrid).

The Information Accountability Foundation (IAF).

First woman Vice President of the Ilustre y Nacional Colegio de Abogados de México (INCAM),

2020–2024.

Author and co-author of more than fifteen books and over 150 articles and essays in the field.

Author and co-author of numerous publications on privacy, technology and digital regulation, including:

15 Years of the LFPDPPP Told by Its Protagonists (2025).

Artificial Intelligence: Concept, Legal Implications, Challenges, Ethical Issues and the Future (2023).

GPS FinTech: Professional Guide (2022).

GPS for Personal Data Protection in the Private Sector (2020).

Personal Data Protection Dictionary (2020).

Digital Threats in the Business Environment (2020).

FINTECH: A Detailed Analysis of Innovations in the Financial Services Industry (2019).

How to Guarantee the Protection of Personal Data (2017).

The World of E-Commerce Under the Law (2017).

Isabel advises leading domestic and multinational organisations operating in highly regulated and technology-intensive sectors, including telecommunications, digital platforms, financial services, banking, insurance, aviation, healthcare, pharmaceuticals, retail, e-commerce, manufacturing and consumer goods.

Isabel is recognised for combining deep legal and technical expertise with strategic judgement and a strong understanding of business operations. Her work is characterised by a practical approach to regulation, a commitment to responsible innovation and an ability to translate complex legal challenges into clear, scalable and commercially effective solutions. She is also an active advocate for professional education, institutional dialogue and women’s leadership in the legal and technology sectors.

AI governance programme for a global technology company

Led the development of a comprehensive AI governance framework covering the use of artificial intelligence across products, services and internal operations. Isabel defined the legal and strategic approach and supervised the alignment of data protection, transparency, explainability and human rights principles with Mexican law and relevant international standards. The programme strengthened the client’s responsible AI governance and readiness for evolving regulatory requirements.

Large-scale data subject rights programme for a leading telecommunications company

Leads the legal strategy for a high-volume programme that manages thousands of data subject rights requests each year. Isabel established the methodology and legal criteria for addressing complex access, rectification, cancellation and objection requests involving matters such as geolocation, call records and debt collection. The programme has enabled the client to meet statutory deadlines consistently while substantially reducing its regulatory, litigation and reputational exposure.

Multi-jurisdictional privacy framework for a major international airline

Led the strategic review of agreements between a major international airline and insurance providers across more than 20 jurisdictions. Isabel designed a multi-jurisdictional legal framework addressing controller and processor roles, international data transfers, contractual safeguards and regulatory risk. The resulting structure enabled the client to advance a complex international initiative under a consistent, scalable and commercially workable privacy model.

Isabel Davara is the Founding and Managing Partner of Davara Abogados, a specialist Mexican boutique dedicated to Digital Law, Technology and Innovation. Admitted to practise in Mexico and Spain, she has more than 20 years of experience advising domestic and multinational organisations on privacy, data protection, cybersecurity, artificial intelligence, FinTech and digital transformation.

She leads complex compliance programmes, regulatory investigations, litigation, international data transfer projects, cybersecurity response strategies and technology governance initiatives. Her practice combines legal rigour, technical understanding and commercial awareness, enabling clients to implement practical compliance structures while supporting responsible innovation.

Alongside her professional practice, Isabel is a professor of law and Coordinator of the Diploma Programme in Digital Law, Technology and Innovation at ITAM. She is also a visiting professor at national and international academic institutions and has participated as a speaker or panellist in more than 300 specialised forums.

Universidad Nacional de Educación a Distancia and Spanish Data Protection Agency

Master’s Degree in Data Protection,

2019 - 2020

PhD in Law

Universidad Pontificia Comillas, ICADE,

1996 - 1998

Universidad Pontificia Comillas, ICADE,

Law Degree

1993 - 1997

Universidad Pontificia Comillas, ICADE,

Bachelor’s Degree in Economics and Business Administration

1994 - 1998

English

Spanish

Isabel has extensive experience advising highly regulated organisations on privacy governance, sensitive and biometric data, international data transfers, data processing agreements, cybersecurity incidents, data subject rights, privacy impact assessments, regulatory investigations and litigation.

Her practice also encompasses AI governance, automated decision-making, digital identity, cloud services, electronic contracting, digital advertising, FinTech regulation and technology-enabled business models. She regularly designs compliance frameworks that reconcile Mexican requirements with the GDPR, US privacy laws and regulatory developments across Latin America.