Notarial public function
Data protection for
notarial offices and registries
Notarial offices process highly sensitive identity and financial data under the protection of public notarial authority. The legal obligation to retain the protocol indefinitely coexists with the rights that GDPR confers on data subjects.
Art. 17.3.b
GDPR — limit on the right to erasure
Indefinite
retention of the notarial protocol
Art. 6.1.e
GDPR — task in the public interest
24 h
personalised proposal
Sector challenges
General obligations for notarial offices and registries
Identity and financial data
Deeds of sale, mortgages, company formations and wills contain identity data, tax identification numbers, property data and highly sensitive financial information.
Indefinite retention of the protocol
The Notarial Act requires the notarial protocol to be retained indefinitely. This legal obligation limits the GDPR right to erasure and must be explained to data subjects.
Restricted access to documents
Access to the protocol and to client files must be restricted to authorised staff. Computerised systems must log who accesses each document.
Wills and succession data
Wills and declarations of heirs contain particularly sensitive data. Their access is governed by notarial legislation and by GDPR.
Data of minors and incapacitated persons
Adoptions, guardianships and contracts with a legal representative include data relating to especially vulnerable persons, who benefit from enhanced protection.
Disclosure of data to registries
Sending deeds to the Land Registry, Companies Registry or Cadastre constitutes a disclosure of data to third parties that must be documented.
The service
What is included in the data protection service for your notarial office
Record of Processing Activities
RoPA (Record of Processing Activities) tailored to notarial activity: clients, employees, disclosures to registries and external processors.
Information clauses
First- and second-layer information for parties to public instruments and web forms.
Privacy policy and legal notice
Legal documentation for the notarial office's website.
Data Processing Agreements (DPA)
DPAs for notarial management software, signature platforms and digital archiving services.
Data breach protocol
Incident response procedure with notification to AEPD within 72 hours.
Data subject rights management
Procedure for handling requests, taking into account the nuances of mandatory protocol retention.
Document management platform
Access to a private platform with documents, templates and electronic signature.
Ongoing support
Unlimited queries. Updates in response to regulatory changes.
External DPO (where applicable)
As a general rule, notarial offices are not listed in the exhaustive provisions of art. 34 LOPDGDD or art. 37 GDPR. The final requirement will depend on the scale, volume and exact nature of each entity's processing activities. Each case requires individual analysis. Separate contract.
Do you need a proposal for your notarial office?
Tell us the size of the office and its activities. Proposal in under 24 hours.
FAQ
Frequently asked questions about data protection in notarial offices
Are notarial offices required to comply with GDPR?
Yes. Notarial offices process personal data of their clients (identity, financial and succession data) and are subject to GDPR and LOPDGDD. The notary's public function does not exempt the office from compliance with data protection regulations.
How is the indefinite retention of the notarial protocol reconciled with GDPR?
The legal obligation to retain the notarial protocol indefinitely prevails over the right to erasure under GDPR (art. 17.3.b). Data included in public instruments must be retained for as long as the legal obligation subsists, and the data subject may not demand its deletion. The notarial office must inform data subjects of this limitation when they exercise that right.
Can auxiliary staff at the notarial office access all documents?
Not necessarily. Access to the notarial protocol and to client files must be restricted to staff with a direct role in the matter. The office must establish differentiated access profiles and maintain a log of who accesses which documents, particularly in computerised systems.
Do wills and succession data enjoy special protection?
Wills contain identity data, financial data and, on occasion, health data (grounds for incapacity, illnesses). This data is especially protected and may only be disclosed to parties with a recognised right, always in compliance with the provisions of notarial legislation on the confidentiality of wills.
How should data relating to minors and incapacitated persons in notarial documents be handled?
Data relating to minors and incapacitated persons appearing in notarial documents (adoptions, guardianships, contracts with a legal representative) is subject to enhanced protection. The notarial office must ensure that processing is limited to the purpose of the public instrument and that data is not accessible beyond what is strictly necessary.
Can data subjects exercise their GDPR rights against a notarial office?
Yes, subject to the inherent limitations of the notarial function. The rights of access and rectification may be exercised, but the right to erasure and the right to object are restricted by the legal obligation to retain the protocol. The office must have a documented procedure for handling these requests and for explaining the applicable limitations in each case.
Free tool
Data protection self-check
Check in 5 minutes your overall adaptation level in personal data protection.
No email · Anonymous · No commitment
Notarial public function
GDPR compliance
for your notarial office.
An expert analyses your practice and proposes the appropriate solution. No intermediaries.
Proposal within 24 h · info@certix.es
Legal notice: This content is for informational and educational purposes only; it does not constitute specialist legal advice. The application of the regulations to each specific case requires individual analysis.