The problem in this case is that the data does not belong to the US government, but to a private person. If the law in Mexico says that you're not allowed to give someone else's object to the US government, obeying US law might require breaking Mexican law.
