Consent to Personal Data Processing: Do You Need Notarisation?

Consent to Personal Data Processing: Is Notarisation Required?

The short answer: in most standard cases, notarisation is not required. Uzbek personal data legislation allows a data subject's consent to be given in written, electronic, or any other form that reliably confirms it was obtained. That said, there are situations where a notary's certification adds real legal weight — or is effectively mandatory — and it's important to understand the difference.

Key takeaways:

• A simple written consent (a checkbox on a website or a signature on a form) is legally sufficient for most commercial and everyday purposes.
• Notarisation strengthens the evidentiary value of the document and reduces the risk of it being challenged later.
• In certain cases — transferring data to third parties, use in judicial or notarial proceedings, or processing special categories of sensitive data — notarised form may be expressly required or strongly advisable.
• The precise requirements depend on the specific context and the type of data controller involved.

---

When a Simple Signature Is Enough

In practice, I often see clients take an overly cautious approach and come in to certify documents that don't need it. If an organisation is collecting personal data for internal purposes — maintaining HR records, processing client applications, sending newsletters — a signed consent in ordinary written form or through an electronic interface is fully sufficient.

The core requirements for valid consent are that it must be specific, informed, and freely given. The consent document should clearly state:

• the purposes for which the data will be processed;
• the categories of data to be processed;
• the duration of the consent;
• the data subject's right to withdraw consent at any time.

If these elements are present and the document is signed by the data subject themselves, no notary is needed.

---

When Notarisation Is Justified or Necessary

I always recommend discussing your specific situation with a notary in advance: requirements vary by industry, type of data, and the role of the data controller.

---

Documents to Bring

If you have decided to have your consent notarised — or if your situation requires it — please prepare the following:

• Passport of the data subject (original);
• Draft consent text or a description of the purpose for which it is being prepared;
• Representative's documents (if the consent is being signed by someone other than the data subject) — a power of attorney, guardianship certificate, etc.;
• Details of the data controller organisation (legal name, registered address, tax identification number) — to ensure the recipient of the data is accurately identified.

Please verify current notarial fees directly with the notary at the time of your appointment, as tariffs are subject to periodic revision.

---

Frequently Asked Questions

Can a notarised consent be revoked?

Yes. The right to withdraw consent for personal data processing belongs to the data subject at any time, regardless of the form in which the consent was originally given. Revocation is made by a written notice addressed to the data controller.

Is it mandatory to specify the duration of consent?

It is strongly advisable. If no duration is stated, consent generally remains valid until it is withdrawn. However, for certain processing purposes, the data controller is independently required to establish a reasonable data retention period.

What if someone signed the consent under duress?

Such consent may be challenged. Notarisation provides an additional safeguard here: the notary verifies the identity and legal capacity of the signatory, and formally records that they acted voluntarily and with full awareness.

Is consent required if data is already publicly available?

Not always — but that does not mean there are no restrictions on processing it. The use of publicly available data must still comply with applicable personal data legislation.

Can I draft the consent text myself, or do I need a lawyer?

A straightforward consent can be prepared using standard template forms. For more complex scenarios — cross-border data transfers, or special categories of data such as health information or biometrics — I recommend seeking specialist legal advice before signing.

---

> Please note: This article is for general informational purposes only and does not constitute individual legal or notarial advice. Every situation is unique, and the specific requirements applicable to your case may differ.

---

Consult a Notary in the Yunusabad District of Tashkent

If you are unsure whether your consent document requires notarisation, or you want to get it right from the outset, I invite you to schedule a consultation. We will review your specific circumstances together and prepare a document with proper and unambiguous legal force.