Consent to Personal Data Processing: Do You Need Notarisation?
A question I hear regularly from clients — foreign investors and local businesses alike — is whether consent to personal data processing must be notarised. The short answer depends on your specific situation. Here I break down when notarisation is genuinely required and when a simple written consent is perfectly sufficient.
Consent to Personal Data Processing: Is Notarisation Required?
The short answer: in most standard cases, notarisation is not required. Uzbek personal data legislation allows a data subject's consent to be given in written, electronic, or any other form that reliably confirms it was obtained. That said, there are situations where a notary's certification adds real legal weight — or is effectively mandatory — and it's important to understand the difference.
Key takeaways:
- A simple written consent (a checkbox on a website or a signature on a form) is legally sufficient for most commercial and everyday purposes.
- Notarisation strengthens the evidentiary value of the document and reduces the risk of it being challenged later.
- In certain cases — transferring data to third parties, use in judicial or notarial proceedings, or processing special categories of sensitive data — notarised form may be expressly required or strongly advisable.
- The precise requirements depend on the specific context and the type of data controller involved.
---
When a Simple Signature Is Enough
By sending the request you agree to the processing of personal data (policy)
Mon–Fri 9:00–18:00 · +998 99 050 50 70
In practice, I often see clients take an overly cautious approach and come in to certify documents that don't need it. If an organisation is collecting personal data for internal purposes — maintaining HR records, processing client applications, sending newsletters — a signed consent in ordinary written form or through an electronic interface is fully sufficient.
The core requirements for valid consent are that it must be specific, informed, and freely given. The consent document should clearly state:
- the purposes for which the data will be processed;
- the categories of data to be processed;
- the duration of the consent;
- the data subject's right to withdraw consent at any time.
If these elements are present and the document is signed by the data subject themselves, no notary is needed.
---
When Notarisation Is Justified or Necessary
| Situation | General Approach | What to Watch For |
|---|---|---|
| Transfer of data to a foreign organisation | May require enhanced confirmation | Verify the requirements of the receiving party in their jurisdiction |
| Consent on behalf of a person lacking legal capacity | Given by a legal representative | The representative's authority must itself be notarially confirmed |
| Consent within a notarial proceeding (inheritance, transactions) | Executed together with the main document | The notary certifies the entire document package |
| Corporate procedures and due diligence | Parties may agree on notarised form | Should be specified in the underlying agreement |
| Litigation or arbitration proceedings | A notarised document is harder to contest | Recommended where the risk of a dispute is high |
I always recommend discussing your specific situation with a notary in advance: requirements vary by industry, type of data, and the role of the data controller.
---
Documents to Bring
If you have decided to have your consent notarised — or if your situation requires it — please prepare the following:
- Passport of the data subject (original);
- Draft consent text or a description of the purpose for which it is being prepared;
- Representative's documents (if the consent is being signed by someone other than the data subject) — a power of attorney, guardianship certificate, etc.;
- Details of the data controller organisation (legal name, registered address, tax identification number) — to ensure the recipient of the data is accurately identified.
Please verify current notarial fees directly with the notary at the time of your appointment, as tariffs are subject to periodic revision.
---
Frequently Asked Questions
Can a notarised consent be revoked?
Yes. The right to withdraw consent for personal data processing belongs to the data subject at any time, regardless of the form in which the consent was originally given. Revocation is made by a written notice addressed to the data controller.
Is it mandatory to specify the duration of consent?
It is strongly advisable. If no duration is stated, consent generally remains valid until it is withdrawn. However, for certain processing purposes, the data controller is independently required to establish a reasonable data retention period.
What if someone signed the consent under duress?
Such consent may be challenged. Notarisation provides an additional safeguard here: the notary verifies the identity and legal capacity of the signatory, and formally records that they acted voluntarily and with full awareness.
Is consent required if data is already publicly available?
Not always — but that does not mean there are no restrictions on processing it. The use of publicly available data must still comply with applicable personal data legislation.
Can I draft the consent text myself, or do I need a lawyer?
A straightforward consent can be prepared using standard template forms. For more complex scenarios — cross-border data transfers, or special categories of data such as health information or biometrics — I recommend seeking specialist legal advice before signing.
---
> Please note: This article is for general informational purposes only and does not constitute individual legal or notarial advice. Every situation is unique, and the specific requirements applicable to your case may differ.
---
Consult a Notary in the Yunusabad District of Tashkent
If you are unsure whether your consent document requires notarisation, or you want to get it right from the outset, I invite you to schedule a consultation. We will review your specific circumstances together and prepare a document with proper and unambiguous legal force.
By sending the request you agree to the processing of personal data (policy)
Mon–Fri 9:00–18:00 · +998 99 050 50 70
Personal data and localization in Uzbekistan
We work out which of your databases must be stored in Uzbekistan after the 2026 reform, which ones may be kept abroad, and what evidence supports that.
Open the practice guidePractising private notary of the Yunusabad district of Tashkent. Certifies transactions, powers of attorney, inheritance and family documents under the law of the Republic of Uzbekistan.
Read also
1 min readHow to Execute a Power of Attorney While Abroad
A practicing notary's guide: how to properly execute a power of attorney from another country through a consulate or local notary, what documents you need, and what you must know for the document to be valid in Uzbekistan.
1 min readImage Use Consent: When Notarization Matters
Learn when photo and video consent requires notarization, which documents to prepare, and how to protect your rights when publishing images in Uzbekistan.
1 min readNotarized Translation of Driver's License for Working Abroad
A comprehensive guide to notarized translation of driver's licenses and related documents for employment abroad. Learn which documents you need, the process, and important considerations when preparing to work as a driver internationally.