No NOM for telemedicine. That doesn't mean it's unregulated.
The draft specific remote care standard was cancelled in 2018 and a final general rule to replace it has been published. The teleconsult is governed by a binding mosaic, and each platform has to define its own remote identification standard and be able to justify it.
It's the largest policy lagoon in the sector and also the best ground for a position: whoever document his criterion before the norm arrives doesn't have to redo his product after.
The year that the notice of cancellation of the draft standards for the regulation of remote care was published. Eight years later, a final general rule was not found to replace them.
Three products, not a consultant.
JAAK offers electronic information and signature software. Test each person directly and we are not an office and this does not replace his or her legal team's advice.
Fingerproof face biometrics, OCR official identification and list consultation, in a single flow.
- Liveness detection (anti-supurization)
- OCR official identification
- Consultation with list and risk
- Expediente digital descargable
Four evidence have to survive the video call.
The consultation ends with the video's closure. The test remains. If these four pieces do not persist with verifiable form, care existed but cannot be shown.
- Before
Identification of both parties
Check who's the patient and who's the professional with valid paper and an enabling role.
Queda: evidencia de verificación y del método usado.
- At first
Consent with its reach
Record, cloud, sub-managers, transfers and secondary uses are different purposes.
Queda: consentimiento de datos separado del consentimiento del acto médico.
- Al cierre
Assigned clinical note
The teleconsult should end with a signed note with date, time and full name.
Queda: la nota firmada sobre una versión identificable.
- Later
Bitage and maintenance
Record of the channel and of the events and of who entered the file later.
Queda: trazabilidad reconstruible y evidencia conservada.
What a rule every part cover and where the hole remains.
There isn't a single provision that resolves the teleconsulta. There are four that cover it by parts and an area that remains decision of the institution.
NOM-004: date, time, full name and autograph, electronic or digital signature in every note.
NOM-024: authentication, traceability, inalterability and did not repudiate in electronic registration.
LFPDPPP 2025: express consent for sensitive data, privacy notice and proportional security.
Remote identification, video quality and signature modality for every teleconsult: a documented own criterion.
What's the rule about every requirement.
Without intermediate interpretations: instrument, number and what requires in practice. The links to the Official Journal are at the end of the page.
PROY-NOM-036-SSA3-2015
No vigenteCancelado 2018
The draft remote health care standard was cancelled by an official notice. It's currently in place and should not be referred to as if it were.
NOM-004-SSA3-2012
Obliga5.10 · 5.12
Any note should have date, time and full name with autograph, electronic or digital signature. The use of electronic means is allowed.
NOM-024-SSA3-2012
Obliga5.8 · 5.9 · 6.6.1 · 6.6.3
Trackability, inalterability, security management system with no repudiation and authentication at least by user and password with additional factors recommended.
NOM-024-SSA3-2012
Permite6.6.2
The document should be structured and unchanged and allow advanced electronic signature by the professional as determined by the provider. That's not a universal mandate.
LFPDPPP 2025
Obliga8 · 14 · 15 · 18
expressed and written consent to sensitive data, information about privacy with specific aims and security measures commensurate with risk.
Remote identification
LagunaNo specification
No single and valid federal remote identification specification or signature modality exists for every teleconsult. To define risk-based internal policy and preserve justification.
Statements that circulate and do not resist the number.
We hear them from vendor evaluations and internal committees in this sector.
"The teleconsulta isn't regulated in Mexico."
No specific final general rule but a binding mosaic: General Health Act, NOM-004 for the note, NOM-024 for traceability and nonrepudiation and the law of personal data of 2025 for the processing of sensitive information.
Cancellation notice PROY-NOM-036 · 27/06/2018
"We have the backup with the session's recording."
The recording does not replace the signed clinical note and also opens up an additional data processing that requires its own base and its own notice. They are two different obligations, and that cover the other.
NOM-004 · 5.10 · LFPDPPP 2025 · 8 and 14
"To accept the terms of the platform cover the patient's consent."
The consent of the Medical Act and the consent of the processing of data are different with different aims and bases. To merge them into a single box weakens both.
LGS 51 Bis 1 · LFPDPPP 2025 · 8 and 14
Two ways to continue, as necessary.
30 minutes with a product specialist from JAAK
We check his teleconsulta flow and show him how to configure KYC with life-proof to identify the patient before the session. We do not give legal advice: normative criteria, including interstate teleconsulta, have to be validated by his or her own lawyer.
To schedule the sittingRemote identity and signature at the flow
Documentary and biometric monitoring with liveness detection prior to consultation, validation of the professional's paper and sign with seal of time to close. API.
Information material. It does not replace a legal opinion for a particular case. No technology itself guarantees legal validity, prevents sanctions or excludes professional liability. What can do a well-designed system is to reduce gaps of evidence and explain what happened.
Each statement of this page has its official source.
Consulted on July 27, 2026. If you find an up-to-date, write and correct with a date of visible review.