Compliance · Regulatory
Regulatory changes 2026-2027 affecting merch in Mexico
Between 2026 and 2027 several changes enter into force or consolidate that directly impact the production, import, invoicing, transport, sustainability and fiscal deduction of corporate merch in Mexico: CFDI 4.0 adjustments, Carta Porte 3.0 consolidation, new REPSE rules for subcontracting, LFPDPPP updates for personal data, IVA and border-zone changes, NOM-004-STPS-1999 updates for operational apparel and consolidation of GOTS, GRS and FSC environmental certifications. This guide summarises the operational implications so that procurement, tax and compliance teams know what to expect and how to prepare, based on work with clients such as Grupo Bimbo, FEMSA, Liverpool, Arca Continental, Cinépolis, Banorte, BBVA México, Grupo Salinas and government offices in CDMX, Monterrey, Guadalajara, Puebla and Querétaro.
Why this biennium is critical for procurement and tax
The 2026-2027 biennium concentrates the maturity of changes that entered into force in previous years and the entry of new rules that directly impact the operation of corporate merch. CFDI 4.0 has been the standard since 2023, but the SAT has announced adjustments to simplify Carta Porte when applicable to mass shipments. LFPDPPP was updated to reinforce the obligations of privacy notice and the personal data protection mechanisms of the merch recipient (employee, client, event attendee). REPSE remains mandatory for suppliers that provide services to the end client.
The procurement team producing corporate merch in Mexico needs to map these five dimensions: tax compliance (CFDI 4.0, Carta Porte, IVA, deductions), environmental compliance (GOTS, GRS, FSC certifications, RETC), labour compliance (REPSE, NOM-004-STPS-1999), personal data compliance (LFPDPPP) and customs compliance (when merch is imported or has imported components under USMCA, TLCUEM or Free Trade Agreements with the European Union, Japan, China or other origins). Each dimension has a concrete supplier and a responsible area inside the client.
Corp-Merch.MX works with clients that adopt a quarterly compliance dashboard covering these five dimensions, updated by programme and by supplier. The dashboard allows identifying in advance which programmes need regulatory adjustments and which flow unchanged. The next section lists the 2026-2027 changes.
Regulatory changes 2026-2027 impacting merch in Mexico
1. CFDI 4.0 and Carta Porte 3.0 — adjustments for mass shipments
CFDI 4.0 has been the standard in Mexico since 2023, but the SAT has announced adjustments to the Carta Porte 3.0 complements to simplify capture when mass shipments are of a single merchandise type. Corp-Merch.MX keeps Carta Porte capture up to date with the new mandatory fields and delivers XML and PDF within 48 business hours of each shipment. For clients such as Grupo Bimbo, FEMSA and Arca Continental, this agility reduces the risk of CFDI rejection in SAT audits.
2. LFPDPPP — protection of merch recipient data
The Federal Law for the Protection of Personal Data Held by Private Parties requires an explicit privacy notice when data is collected from the merch recipient (employee, client, trade show attendee). For year-end programmes or events with nominal registration, Corp-Merch.MX recommends that the client's legal team validate the privacy notice, the purpose of the processing and the data retention period. The recipient's data must not be transferred to the supplier without express consent.
3. REPSE — Registry of Specialised Service Providers
REPSE applies to suppliers that deliver services to the end client and fall under any of the assumptions of article 15 of the Federal Labour Law. Corp-Merch.MX operates as a merch production supplier and maintains an active REPSE registration, with a current copy available for clients that require it during the quotation process or internal audit.
4. NOM-004-STPS-1999 — operational apparel and protective equipment
NOM-004-STPS-1999 regulates protection systems and safety devices in the plant and applies to operational apparel delivered to plant employees, field technicians, sales forces and operational staff. Corp-Merch.MX verifies that each piece of operational apparel complies with the applicable NOM (resistance, flame retardant, high visibility) when the client's programme requires it, and delivers the technical sheet and compliance certificate with the delivery.
5. IVA, border zone and fiscal deductions
IVA at 16 % applies in the general territory and 8 % in the border zone (Baja California, Sonora, Chihuahua, Coahuila, Nuevo León, Tamaulipas, Quintana Roo, part of Baja California Sur). Corp-Merch.MX invoices with the IVA corresponding to the client's fiscal address and breaks out freight, Carta Porte and, when applicable, ISR withholding. Programmes with positive environmental impact (textiles with GOTS, GRS, products with green seal) qualify for accelerated deduction under article 34 of the LISR, which reduces the effective ISR rate.
6. Environmental certifications GOTS, GRS, FSC and RETC
Environmental certifications GOTS (organic textile), GRS (recycled), FSC (paper and cardboard from responsible forestry management) are increasingly required by corporates with public ESG commitments. Corp-Merch.MX works with suppliers that keep these certifications active and delivers documentation with each shipment. RETC (Registry of Emissions and Pollutant Transfer) applies to specific productive processes and is validated case by case.
How these changes impact the client's operational programme
The first impact is time. When new rules are incorporated, the programme lead time is increased between 3 and 10 days to adapt documentation, Carta Porte, privacy notice or NOM technical sheet. Corp-Merch.MX communicates this adjustment to procurement before issuing the quote so the client can plan the impact on its internal calendar.
The second impact is cost. Some new rules (such as RETC certification or REPSE verification) can raise the unit cost between 2 % and 8 % depending on material and volume. Corp-Merch.MX reports this impact in the broken-out quote so the client can decide whether to absorb it or adjust the programme.
The third impact is documentation. Each programme must deliver, in addition to the CFDI and Carta Porte, the privacy notice (when applicable), the NOM technical sheet (when applicable), the environmental certificate (when applicable) and a copy of the supplier's REPSE registration. Corp-Merch.MX consolidates this documentation in a single package per shipment and delivers it with the invoice.
The fourth impact is fiscal deduction. Programmes with environmental certification may access accelerated deduction under article 34 of the LISR. Corp-Merch.MX documents the certification, applies it in the CFDI 4.0 invoice and delivers the support so the client can claim the deduction with the SAT.
How to prepare operationally for the 2026-2027 biennium
The first exercise is to map next year's merch programmes and classify them by regulatory dimension: tax, environmental, labour, personal data, customs. Corp-Merch.MX accompanies clients such as Grupo Bimbo, FEMSA, Liverpool, Arca Continental, Cinépolis, Banorte, BBVA México in this annual mapping. The third exercise is to update the quarterly compliance dashboard based on the 2026-2027 changes documented in this guide.
Corp-Merch.MX also recommends reviewing the privacy notice of the merch programme, the Carta Porte clause in purchase orders and the master contract with the supplier to ensure the new rules are incorporated without renegotiation. This review takes between 5 and 10 business hours and is documented in an addendum to the contract.
How this translates into savings and compliance
When the procurement and tax team adopts the quarterly compliance dashboard, the results are consistent. The CFDI rejection rate by the SAT drops below 0.5 %. The fiscal deduction of the programme is maximised because each shipment brings complete documentation. The return rate for non-compliance drops below 1 %. The brand reputation is preserved because there are no compliance incidents.
The quarterly report Corp-Merch.MX delivers consolidates the five regulatory dimensions by programme and by supplier. This facilitates external audit, presentation to the board and the response to any visit by the SAT, STPS or PROFECO.
Frequent questions about regulatory changes
When do the CFDI 4.0 adjustments enter into force?
The CFDI 4.0 adjustments are applied gradually as the SAT publishes its in-force Miscelánea Fiscal Resolution. Corp-Merch.MX keeps Carta Porte capture and applicable complements up to date. The adjustments are reflected in the CFDI stamped as of the effective date.
How does LFPDPPP apply to corporate merch?
When the programme collects recipient data (employee, client, attendee) to personalise the shipment or do post-delivery follow-up, LFPDPPP applies. Corp-Merch.MX recommends that the client's legal team validate the privacy notice, the purpose of the processing and the retention period. Data must not be transferred to the supplier without express consent from the owner.
Which environmental certifications are most common?
The most common certifications for organic textile are GOTS (Global Organic Textile Standard) and GRS (Global Recycled Standard). For paper and cardboard, FSC certification (Forest Stewardship Council). For packaging and POP, recyclability and biodegradability certifications depending on the material. Corp-Merch.MX delivers documentation with each shipment when the client requires it.
When does Carta Porte 3.0 apply to a merch shipment?
Carta Porte 3.0 applies when the shipment exceeds 1.5 tonnes or $50,000 MXN in value, or when the carrier operates under federal autotransport regime. Corp-Merch.MX issues Carta Porte with all the fields required by the SAT and delivers it with the corresponding CFDI.
Let's talk about the regulatory compliance of your next programme
If your team is planning a new programme and wants to validate that it complies with the 2026-2027 regulatory changes in the five dimensions (tax, environmental, labour, personal data, customs), let's talk before issuing the purchase order. We need the programme, materials, number of pieces, delivery cities and source markets of the materials. With that we issue a broken-out quote with IVA, Carta Porte when applicable, NOM technical sheet when required and environmental certifications when applicable.
Corp-Merch.MX is a corporate merch production desk based in Mexico City. We operate independently and are not a partner, official certifier or representative of the SAT, STPS, PROFECO, brands, companies or government offices mentioned on this page. Mentions are made exclusively for descriptive purposes to identify the operational context of the sector. The regulatory information on this page is general in nature and based on publications in force at the time of writing — for your specific situation consult your legal, tax or compliance team.