You bought the fingerprint time clock, screwed it to the wall next to the door, and registered your 30 employees in five minutes. Convenient, cheap, no one can lend their card to someone else. What almost no one told you when they sold it to you: that fingerprint is sensitive personal data, and Mexican law obligates you to treat it with a level of care that the device's manual doesn't even mention.