Luis Fernando García Muñoz

Luis Fernando García Muñoz is the Mexican human-rights lawyer who co-founded R3D — Red en Defensa de los Derechos Digitales in 2014 and led it as Executive Director for eleven years before closing his executive cycle on 1 May 2025 in a planned Board-led leadership transition; he is the corpus's on-record Mexican and Spanish-language Latin American voice on Pegasus mercenary spyware, biometric mass-surveillance infrastructure, facial recognition, and AI-and-human-rights advocacy at the Inter-American and international levels (see Person entry). He is tracked here as a Voice because his sustained public-facing output — the eleven-year public-spokesperson register on R3D's multi-year civil-society Pegasus investigations (#GobiernoEspía from June 2017 and Ejército Espía from October 2022, both joint with the Citizen Lab); the recurring named-on-record international-press register across The New York Times, The Washington Post, CNN, Al Jazeera, El País, NPR, Reuters, the Pegasus Project consortium led by Forbidden Stories, and the cybersecurity-press surface; the Talks at Google "Gobierno Espía" named-keynote register; the Freedom Online Conference 2021 and International Journalism Festival speaker register; the named-byline analytical register across GISWatch (the 2019 "AI policing of people, streets and speech" contribution), Necessary and Proportionate, Archivos Jurídicos UNAM, and the Mexican Supreme Court of Justice (the facial-recognition-and-discrimination piece); and the long-running R3D Spanish-language author archive — carries the working argument that civil-society documentation, strategic litigation, and international-press advocacy on Mexican state-AI deployments are inseparable from the wider make-AI-good question of whose interests automated systems are built to serve, and that the corpus owes its first Mexican-grassroots voice to a lawyer-founder whose register is grounded in the lived conditions of Mexican journalists, defenders, and politically targeted publics.

The Voice anchors three movement-area registers that the corpus's voices slice had previously left empty.

• The first Mexican and second Spanish-language Latin American Voice anchor. The corpus's Latin America voices slice had previously carried only the Brazilian Portuguese / São Paulo register (Jamila Venturini) and the Chilean / Andean Spanish-language register (J. Carlos Lara) — both anchored inside Derechos Digitales's regional co-direction. No Mexican voice sat in corpus before this entry; García anchors the Mexican national-grassroots register from inside R3D's Mexico City base, and the second Spanish-language Latin American voice complements the Chilean / Andean anchor with the Mesoamerican / North-American Latin American register.
• The first Pegasus-and-mercenary-spyware Voice anchor. The corpus had previously carried the Pegasus and mercenary-spyware register only through Access Now's organisational presence and through cross-references in adjacent entities (the Citizen Lab coordinating partner role; the Pegasus Project consortium cross-reference). No Voice anchored the field. García's eleven-year spokesperson register on R3D's #GobiernoEspía and Ejército Espía investigations — the longest-running Mexican civil-society spyware-accountability campaign and one of the field's principal multi-year empirical documentation threads — anchors the spyware-accountability voice slice for the first time.
• The lawyer-founder-and-international-press-spokesperson sub-type. Structurally distinct from the existing voice anchors on litigators (Cori Crider, Mercy Mutemi, Daniel Motaung), framework authors (Sasha Costanza-Chock, Joy Buolamwini), the lawyer-founder-and-columnist register (Apar Gupta), the lawyer-organiser-and-multilateral-body register (Nighat Dad), the lawyer / Public Policy and Research leadership register (J. Carlos Lara), the journalist-and-researcher register (Jamila Venturini), the convener-and-essayist register (Mohamad Najem), the US Black-grassroots-data-justice register (Tawana Petty), the inclusionist-and-rights-advocate-with-multilateral-leadership register (Gbenga Sesan), and the coalition-coordinator-and-podcast-host register (Felicia Anthonio). García's distinctive register is the lawyer-founder whose public output runs as the eleven-year named press-spokesperson on a multi-year civil-society strategic investigation that broke twice on the front page of The New York Times, anchored cross-corroborated front-page coverage across the principal Anglophone and Hispanophone international press, and is one of the field's clearest documented cases of civil-society documentation translating into international-press accountability without dissolving into the technical-cybersecurity vocabulary.

Public output and venues

García's public-facing work runs through five overlapping channels.

• International-press named-on-record register on Pegasus. The most load-bearing channel of García's voice is the eleven-year named-on-record register he has carried across the international press as the public spokesperson for R3D's Mexican Pegasus campaign. His own professional site anchors the press-feature register at The New York Times, The Washington Post, CNN, Al Jazeera, El País, NPR, and Reuters. The Pegasus Project consortium Mexico chapter (July 2021), led by Forbidden Stories and Amnesty International's Security Lab and joined by R3D as a Mexican investigative partner, placed García inside the global investigative coalition documenting Pegasus's industrial-scale deployment. The continued register through NPR (March 2023, on Mexican army Pegasus use) and The Record (on the GuacamayaLeaks documentation of the secret Mexican military intelligence unit) anchors the running press-feature register through both the López Obrador and the post-2024 administrations.
• Talks at Google and named-keynote register. García delivered Gobierno Espía as a named keynote in the Talks at Google series — the headline international-civil-society public-speaker artefact of his voice, in which he presented R3D's joint investigation with Article 19 Mexico, SocialTIC, and the Citizen Lab into the documented Pegasus targeting of Mexican journalists and human-rights defenders during the Peña Nieto administration. The Talks at Google appearance is the corpus-evident single artefact through which the substantive #GobiernoEspía argument reaches a global Anglophone non-press audience; it anchors the named-keynote register alongside his speaker roles at the Freedom Online Conference 2021 (the Freedom Online Coalition's principal annual multistakeholder convening on internet freedom and human rights) and the International Journalism Festival in Perugia (the principal European annual gathering of working journalists).
• Spanish-language Mexican press and analytical-commentary register. García's R3D author archive records the canonical Spanish-language named-byline analytical register through which the organisation's positions on the #GobiernoEspía and Ejército Espía investigations, on the Padrón Nacional de Usuarios de Telefonía Móvil mandatory biometric mobile-phone-user registry, on Mexican federal facial-recognition deployment, and on the wider human-rights stakes of state-AI infrastructure are carried into the Mexican civil-society and press surface. The Mexican-press register includes recurring named-on-record commentary across Aristegui Noticias, Proceso, CNN en Español, and the analytical-commentary register in Coda Story and Rest of World on Mexican biometric mass-surveillance infrastructure.
• Named-byline analytical contributions. García's recurring named-byline contributions sit across four artefact-bearing registers. The GISWatch 2019 "AI policing of people, streets and speech" chapter is the corpus's first explicit AI-and-human-rights named-byline anchor of his voice — placing his work inside the international Association for Progressive Communications-coordinated annual-report record on civil-society digital-rights monitoring at exactly the moment the AI-and-policing question was crystallising as a distinct movement-area concern. The Necessary and Proportionate Principles author register anchors his long-standing contribution to the international Electronic Frontier Foundation-coordinated coalition principles on the application of human rights to communications surveillance. The named-byline contributions for Archivos Jurídicos UNAM (freedom of expression and media) and for the Mexican Supreme Court of Justice (facial recognition and discrimination) anchor the Mexican legal-academic and judicial-publishing surface his voice carries.
• Podcast and long-form interview register. García's long-form interview register runs through the Access Now "Spyware in Mexico" interview (22 June 2017, conducted early May 2017 by Senior Global Advocacy Manager Deji Bryce Olukotun) — the corpus's most directly cited single artefact of his signature framings — and through the Adultos Raros podcast named-guest register (episode #25) on the Mexican Spanish-language podcast circuit, and continues through Aristegui Noticias and Así las cosas W named-guest appearances on the Mexican Spanish-language broadcast surface.

Signature framings

Three formulations recur across García's public output and have done the most to install his register into the international Pegasus, mass-surveillance, and AI-and-human-rights fields.

• "Surveillance can cost you your life or your liberty" — life-and-liberty framing. García's framing in the Access Now interview (June 2017) — "surveillance can cost you your life or your liberty", paired with the related formulation "your privacy is your security; they're the same thing" — reframes the international privacy debate from a luxury-good or consumer-protection question into a substantive life-and-liberty question for Mexican publics. The framing has done the most to anchor R3D's international-civil-society line that the Mexican Pegasus campaign is not a technical-cybersecurity story but a structural-human-rights story whose stakes sit alongside enforced disappearance, extrajudicial killing, and the wider Mexican impunity landscape against journalists and defenders.
• "The power to surveil, control, manipulate, and punish people" — biometric-database framing. García's named formulation in Rest of World (3 November 2021) on the proposed Cédula Única de Identidad Digital (CUID) Mexican federal biometric database — "this gives the government and corporations the power to surveil, control, manipulate, and punish people" — anchors R3D's domestic register on contesting the rollout of biometric and algorithmic infrastructure in Mexican state administration. The framing pairs with the further on-record line — "many Global South governments do not realize — or they do realize and just don't care — that they are building systems that will benefit their oppressors rather than their citizens", and "it's very difficult to resist once implemented; that's why the moment to resist is now" — to carry the substantive proposition that biometric mass-surveillance infrastructure is a one-way ratchet whose political-economy stakes have to be argued before deployment, not after.
• "Privacy is your security" — refusing the privacy-as-luxury frame. García's running framing across the Access Now interview, the Coda Story commentary on Mexican biometric SIM-card registration ("almost no democratic country requires its citizens to provide biometric data to buy a SIM card"; "it's not unreasonable to fear that the information provided to the database would end up being used by ... future administrations that are not committed to human rights at all"), and the NPR coverage on the López Obrador-era Pegasus deployment — that surveillance acquisitions are sold to publics on "a narrative that has reduced the security issues in Mexico and the violence related to organized crime as an excuse, as a selling point to spend large sums of money in acquiring technology" — is the substantive Global-South civil-society counter-frame to the security-versus-rights binary the Mexican state has used to justify the post-Peña-Nieto continuation of Pegasus and the wider acquisition of state-surveillance technology. The framing has carried through the Inter-American Commission on Human Rights coalition record and into the regional Latin American civil-society line on AI-and-human-rights.

Organisational vehicle

García's public output runs through R3D — the Mexico City-headquartered Mexican non-profit he co-founded in 2014 as the country's first civil-society organisation dedicated specifically to digital-rights research, litigation, and public advocacy, and which he led as Executive Director for eleven years before closing his executive cycle on 1 May 2025 and continuing in a Board role. His training — a law degree from Universidad Iberoamericana in Mexico City and a Master of Laws in international human-rights law from Lund University in Sweden — anchors the technical-legal authority on which the eleven-year strategic-investigation, litigation, and international-press-spokesperson register is built. The organisational vehicle places his voice inside the wider international civil-society spyware-accountability field anchored by Access Now, Amnesty International's Security Lab, and the Citizen Lab; inside the regional Latin American Al Sur consortium (alongside Derechos Digitales and Coding Rights); inside the international Electronic Frontier Foundation-coordinated Necessary and Proportionate communications-surveillance principles project; and inside the International Institute of Communications policy-and-research network.

Why this is a Voice entry

A Voice entry is created here, rather than additional structure on the Person entry, because García's public-facing output is itself the load-bearing object the corpus needs to track: the eleven-year named press-spokesperson register on R3D's multi-year Pegasus campaign (#GobiernoEspía and Ejército Espía) that anchored front-page coverage in The New York Times and across the principal international press; the named-keynote register at Talks at Google, the Freedom Online Conference 2021, and the International Journalism Festival; the named-byline analytical register including the GISWatch 2019 "AI policing of people, streets and speech" contribution and the Necessary and Proportionate communications-surveillance principles author register; the analytical-commentary register on biometric mass-surveillance infrastructure in Coda Story and Rest of World; and the signature framings — "surveillance can cost you your life or your liberty", "the power to surveil, control, manipulate, and punish people", and "privacy is your security" — through which the substantive R3D line has entered the international human-rights, anti-spyware, biometric-surveillance, and AI-and-human-rights fields. The corpus's voices slice carried no Mexican anchor, no Pegasus-and-mercenary-spyware anchor, and no lawyer-founder-and-international-press-spokesperson sub-type before this entry; this entry gives all three their first first-person voice. Affiliation, training, and biographical structure are recorded on the linked Person entry per the corpus's Person/Voice split.