Key points
- Nuevo León counted 5,784,442 residents in the 2020 census, with Monterrey the largest municipality at 1,142,994 and a state median age of 30.1
- Of the 49,500 Nuevo León residents born abroad in 2020, 23,200 were born in the United States.1
- Mexico's 2025 data protection law gives a clinic twenty days to answer an access, rectification, cancellation or objection request, and requires it to tell patients at once about a breach that significantly affects them.2
- Nuevo León's Secretaría de Salud carries sanitary regulation for the state, alongside COFEPRIS at federal level.45
- wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.
Summary
A private clinic in Monterrey can use AI to draft notes and patient replies under Mexico's 2025 personal data law, which sets duties for security measures, breach notice and twenty-day answers to patients' data requests. The state's Secretaría de Salud regulates health services locally, and wai hosts each clinic's records in Mexico.
Every enquiry from San Pedro or across the border answered before morning clinic, and every deposit already in the clinic's account. Nuevo León's 5.8 million residents and a median age of 30 give Monterrey clinics a young, busy market to serve.1
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoIn fifteen minutes, watch an English message from Texas become a booked knee consultation with a deposit in pesos and a signed note.
| Rule | What it requires | What to ask | How wai meets it |
|---|---|---|---|
| Article 18, security measures | Administrative, technical and physical measures matched to data sensitivity | Who can see which records, and how is that enforced | Role-based least-privilege access in the database, AES-256 at rest, TLS 1.3 in transit |
| Article 19, breaches | Patients told immediately of a breach that significantly affects them | How fast would we know who was affected | Every message, draft, approval and signature logged and exportable |
| Article 20, confidentiality | Everyone handling data stays bound to confidentiality, even after leaving | Which subprocessors touch patient data | Subprocessors named, with 30 days' notice of changes |
| Article 31, ARCO requests | Answer within twenty days, act within fifteen more | Can we export one patient's full record quickly | Signed notes, letters and the activity log exportable per patient |
| Secretaría de Salud de Nuevo León and COFEPRIS | State and federal sanitary regulation | Do our licences cover every site and service | Records hosted in Mexico, set up with each clinic |
The private care market in Monterrey
INEGI's 2020 census put Nuevo León at 5,784,442 residents, seventh among Mexico's states, with Monterrey the most populous municipality at 1,142,994.1 The state's median age rose from 24 in 2000 to 30 in 2020, and 61 of every 100 people aged 12 and over were economically active.1
Affiliation to health services reached 80.9% of the state's population in 2020, up from 77.1% in 2010.1 The same census counted 49,500 residents born in another country, 23,200 of them in the United States, 5,982 in Venezuela and 4,438 in Honduras.1
The rules a clinic in Monterrey works under
Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, reissued in 2025, binds every private clinic in the state.2 Article 18 requires administrative, technical and physical security measures that are no weaker than those the clinic uses for its own information, weighted for the sensitivity of the data.2 Article 19 requires a clinic to inform patients immediately of a breach that significantly affects their rights, and Article 20 keeps everyone who handles the data bound to confidentiality after they leave.2
Patients may ask to access, rectify, cancel or object to the use of their data. Article 31 gives the clinic twenty days to answer and fifteen more to act on a request it accepts, each extendable once.2 The Secretaría Anticorrupción y Buen Gobierno is the federal authority for personal data protection.3
Nuevo León's Secretaría de Salud names sanitary regulation and promotion among its tasks, working with public and private institutions across the state.4 COFEPRIS protects the population against sanitary risks through regulation, control and surveillance at federal level.5
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Monterrey. Access is set by role in the database, and every message, draft, approval and signature is logged so the clinic can show its security measures and answer an ARCO request on time.6
The languages Monterrey patients write in
Spanish leads, with English close behind for a state where 23,200 residents were born in the United States.1 The census also counted 77,945 people aged three and over who speak an indigenous language, 1.4% of the state's population and up from 0.9% in 2010.1
wai works in any language. Patients can answer intake questions by voice in their own language, and the clinician reads the answers before the visit.7 The front desk reads each draft in the patient's language and sends it when it is right.
What a demo shows in Monterrey
The demo opens on an English WhatsApp sent at 23:15 by a patient in Laredo, Texas, asking whether the orthopaedic surgeon in San Pedro Garza García can see his knee on Friday. wai checks Google Calendar, Outlook or Apple Calendar for when the surgeon is busy, finds two open Friday times and drafts the reply. The front desk approves it at 7:30.
He books on the clinic's own website, earliest time first, and pays the deposit in pesos by card or Apple Pay. The money goes to the clinic's own Stripe account and the clinic stays merchant of record.8 The confirmation, receipt and intake questionnaire reach him before he drives south.
On Friday the surgeon tells him the scribe is on, then reads the drafted note, edits it and signs. wai drafts the letter for his doctor in Texas, codes the note and prepares the claim for his insurer. See the deposits guide for the numbers to track.
For hospital groups, insurers and the state in Nuevo León
A hospital group, an insurer or a public body in Nuevo León can commission a system built on wai for one care pathway, such as cross-border orthopaedics, with records hosted in Mexico and the rights to data, configuration and models set in the contract. The process is on the organisations page.
Where to start
First, write down the security measures Article 18 asks for and who holds each one.2 Second, set a twenty-day clock for ARCO requests and name the person who answers them.2 Third, draft the patient notice the clinic would send after a breach, so it can go out immediately.2
Then count last month's enquiries by language and hour, including those from the United States, and take them into a fifteen-minute demo. Prices are on the pricing page.
Bring last month's WhatsApp, email and missed calls, in Spanish and English, and watch each one drafted for your team to approve.
Frequently asked questions
How long does a Monterrey clinic have to answer a patient's data request?
Twenty days to communicate its decision under Article 31 of the 2025 law, and fifteen more to carry it out, each extendable once where the case justifies it.2
Must a clinic report a data breach to patients?
Yes. Article 19 requires the clinic to inform patients immediately of a breach that significantly affects their property or moral rights.2
Who regulates health services in Nuevo León?
Can patients from Texas pay a deposit before they travel?
Yes. The booking link takes the deposit in pesos by card or Apple Pay through the clinic's own Stripe account, and the clinic remains merchant of record.8
Where are our records hosted?
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. A Monterrey clinic's records stay in Mexico.
Who signs an AI-drafted note?
The doctor. wai drafts the note during the consultation, and the doctor reads, edits and signs it before it enters the record.
Sources
- 1INEGI, 2021En Nuevo León somos 5 784 442 habitantes, Censo de Población y Vivienda 2020, comunicado de prensa 40/21Read 15 October 2026Read source
- 2Cámara de Diputados, 2025Ley Federal de Protección de Datos Personales en Posesión de los Particulares, Articles 18, 19, 20 and 31Read 15 October 2026Read source
- 3Gobierno de México, 2026Secretaría Anticorrupción y Buen Gobierno, home pageRead 15 October 2026Read source
- 4Gobierno de Nuevo León, 2026Secretaría de Salud de Nuevo León, misiónRead 15 October 2026Read source
- 5Gobierno de México, 2026COFEPRIS, home pageRead 15 October 2026Read source
- 6wai, 2026Security at waiRead 15 October 2026Read source
- 7wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 8wai, 2026wai CheckoutRead 15 October 2026Read source
Every enquiry from both sides of the border answered by morning, every deposit in your account.
Fifteen minutes with a clinician who uses wai daily, on your own diary and payments. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

