How long is an internal civil protection programme valid?

One year (Article 76(B)(IX) of the Regulation of the General Civil Protection Law).

How many drills are required?

As many as the programme sets and, in any case, at least two a year with different risk scenarios (Article 76(B)(V)).

The Internal Civil Protection Unit, which may be advised by an individual or firm with the corresponding up-to-date registration (Article 40 of the General Civil Protection Law). It is signed by competent personnel and by the owner or legal representative (Regulation, Article 76(B)(II)).

MX · Expiry & renewal tracking

Never let a site's internal civil protection programme lapse

Mexico's internal civil protection programme is valid for one year, is updated at least every two years and is tested with at least two drills a year (Regulation of the General Civil Protection Law, Article 76(B)). The Internal Civil Protection Unit prepares it and the owner or legal representative signs it.

Under Mexico's General Civil Protection Law, an internal civil protection programme (Programa Interno de Protección Civil) is carried out in each building to mitigate previously identified risks and be ready to respond to an emergency or disaster (Article 39). Buildings and facilities of public, private and social sector organisations and companies referred to in the Regulation must have one; it is prepared, updated, operated and monitored by the Internal Civil Protection Unit, which may be advised by a registered individual or firm (Article 40).

The Regulation makes it generally applicable and mandatory for centres, establishments and fixed and mobile facilities that could be affected by incidents, emergencies or disasters (Article 74). It must be in writing and include an operational plan with prevention, response and recovery sub-programmes, a contingency plan and a business continuity plan (Articles 75 and 76(A)).

The programme is valid for one year and must be updated and reviewed at intervals of no more than two years. It also requires an annual self-inspection programme and drills at least twice a year (Article 76(B)(III), (V) and (IX)).

Start free

At a glance

Validity	One year (Regulation, Article 76(B)(IX))
Review and update	At least every two years (Article 76(B)(IX))
Drills	At least twice a year, with different risk scenarios (Article 76(B)(V))
Self-inspection	Annual programme ensuring inspection and supervision of implementation (Article 76(B)(III))
Signature	Competent personnel and the business owner or legal representative (Article 76(B)(II))
Prepared by	The Internal Civil Protection Unit, optionally advised by a registered third party (General Civil Protection Law, Article 40)
Oversight and penalties	Civil Protection Units, under local rules (Article 76(B)(XI))

This is the federal rule. It applies without prejudice to local civil protection rules, and penalties are imposed under local regulations (Regulation, Article 76(B)(X) and (XI)).

Who is responsible?

The Internal Civil Protection Unit, which prepares, updates, operates and monitors the programme (General Civil Protection Law, Articles 39 and 40; Regulation, Article 78). Besides competent personnel, the programme is signed by the business owner or the company's legal representative (Regulation, Article 76(B)(II)). Documentary evidence of follow-up and of evaluation, verification or inspection reports, signed by the person responsible for the programme, must be kept (Article 76(B)(VIII)).

If the deadline passes

Compliance is overseen by the Civil Protection Units, through the authorities empowered to carry out inspection or verification visits and, where applicable, impose penalties under local regulations (Regulation of the General Civil Protection Law, Article 76(B)(XI)).

Don't forget the drills

Besides the one-year validity, the programme must be tested with drills at least twice a year (Article 76(B)(V)). It is worth recording each drill as a separate document so that it is not missed either.

Tracking it with ExpirySuite

Add each building and record the expiry date of its internal civil protection programme: one year after it takes effect.
Email reminders arrive 60, 30, 14, 7 and 1 day before expiry and on the expiry day.
Your external consultant can upload the updated programme through a secure link that is valid for 14 days and needs no account.
Assign the head of the Internal Civil Protection Unit as the responsible person; if a programme lapses, managers get further reminders 3, 7 and 14 days later.

Frequently asked questions

How long is an internal civil protection programme valid?: One year (Article 76(B)(IX) of the Regulation of the General Civil Protection Law).
How often must it be reviewed?: It must be updated and reviewed at intervals of no more than two years (Article 76(B)(IX)).
How many drills are required?: As many as the programme sets and, in any case, at least two a year with different risk scenarios (Article 76(B)(V)).
Who prepares it?: The Internal Civil Protection Unit, which may be advised by an individual or firm with the corresponding up-to-date registration (Article 40 of the General Civil Protection Law). It is signed by competent personnel and by the owner or legal representative (Regulation, Article 76(B)(II)).

Sources

Last checked: Oct 3, 2026 · This page summarises official sources for general information and is not legal advice. Check the linked sources for current rules and fees.

Made for internal civil protection programme (Mexico)

A ready template for internal civil protection programme (Mexico) with sensible validity defaults, so you enter less and track more.

Reminders on time

Email alerts at 60, 30, 14, 7 and 1 day before each internal civil protection programme (Mexico) expires, plus overdue escalation to managers.

Assign an owner

Give each internal civil protection programme (Mexico) an owner and let employees update their own via a secure link — no login needed.