N.M. Stat. § 1-5-26
Contractual agreement required with data processor.
The secretary of state shall enter into a written contractual agreement with the data
processor notwithstanding the fact that the data processor may be a department of state
government.