A notary's office handles some of the most complete personal data there is: civil status, family situation, assets, debts, estates, gifts, ID documents. For this processing, the notary is the controller under the GDPR, and that responsibility comes on top of the professional secrecy that already governs the profession.
A word for readers outside civil-law countries: in France and most of continental Europe, a notary is not a notary public who witnesses signatures. Notaries are lawyers appointed as public officers. They draft and authenticate deeds for property sales, marriage contracts, gifts and estates, and they keep the original of each deed, called the minute, in their office.
AI is now arriving in notary offices (drafting deeds, summarizing files, answering clients), which raises a new question: how do you benefit from these tools without letting identifiable estate or asset files leave the office?
This guide covers the data contained in deeds, a notary office's GDPR obligations, the security of electronic deeds, client rights versus the retention of original deeds, and handling sensitive documents with AI without storing them.
The golden rule: the original deed stays intact, at the office. Only working documents go out to tools, and they go out pseudonymized.
Key takeaways
| Point | Details |
|---|---|
| The notary is the controller | They answer for the lawfulness, security and retention period of the data. |
| Retention of original deeds overrides erasure | A client cannot have an authentic deed deleted when the law requires it to be kept. |
| Asset and estate data is highly sensitive | Even outside article 9, its disclosure causes direct harm. |
| AI should only receive pseudonymized working documents | Never the original deed, never an identifiable file. |
| Data protection extends professional secrecy | A leak engages the notary's civil and disciplinary liability. |
Table of contents
- What data do notarial deeds contain?
- A notary office's GDPR obligations
- Securing electronic deeds
- Client rights versus the retention of original deeds
- The risks of non-compliance
- Handling sensitive documents without storing them
- The most common mistakes
- Safe-doc for notary offices
- Frequently asked questions
- Further reading
- Sources
- Recommended reading
What data do notarial deeds contain?
A notarial deed captures almost every side of a person's life. First comes civil status and identity (last name, first names, date and place of birth, nationality, ID document number), then family situation: marital property regime, marriages, divorces, civil partnerships, parentage.
Add financial data (property values, income, debts, the makeup of the estate), tax data (tax ID number, capital gains, status under France's real estate wealth tax) and, for estates, family relationships, heir status, shares and prior gifts. And then the supporting documents: passport copies, proof of address, civil status records.
Some of this data falls under article 9 of the GDPR (health, for example where a protective measure or a clause depends on a person's health) and is prohibited from processing in principle, with exceptions. But even data outside article 9, such as assets or the makeup of a family, causes direct harm if disclosed.
A notary office's GDPR obligations
The first obligation is to appoint a data protection officer. Because notaries carry out a public service mission, this appointment is generally considered mandatory for notary offices; the DPO can be shared between offices. The office also keeps a record of processing activities under article 30 (purpose, categories of data, retention periods, recipients, security measures): it is the first document requested during an inspection.
High-risk processing, such as large-scale financial data or a new AI tool, calls for an impact assessment. The office must also put security measures in place (encryption, named access rights, access logging) and notify breaches to the CNIL, France's data protection authority, within 72 hours when they pose a risk to individuals. It respects the retention periods specific to each category of document and records them in the register. The reference framework is summarized in our guide to the CNIL and EDPB recommendations.
Pro tip: Document each decision when it is made, not after the fact. A register kept up to date as you go is worth far more than one rebuilt the night before an inspection.
Securing electronic deeds
Electronic deeds create risks of their own, on top of the general GDPR obligations.
| Criterion | Requirement |
|---|---|
| Electronic signature | Qualified electronic signature under the EU eIDAS regulation |
| Timestamping | Timestamp from a qualified trust service provider |
| Hosting | In the European Union; for the most sensitive data, ANSSI, France's cybersecurity agency, recommends a SecNumCloud-qualified offering |
| Encryption | At rest and in transit, for all exchanges with clients and partners |
| Traceability | Named, timestamped access log |
Client rights versus the retention of original deeds
Clients have the rights the GDPR grants them, but the profession's own obligations frame how those rights apply.
The right of access lets any client ask for the data that concerns them; the DPO responds within one month. The right to rectification also exists, but an error in a deed is corrected through the procedures specific to notarial law. The right to object applies in particular to marketing by the office.
The right to erasure, on the other hand, is limited by the legal retention obligation. In France, original deeds stay at the office for 75 years before being transferred to the public archives: a client cannot have an authentic deed deleted. Data leaving the EU is covered in non-EU transfers and pseudonymization.
Balancing privacy against the retention of evidence is one of the tensions specific to the notarial profession. The original deed must stay intact; data minimization happens on the working documents, copies and correspondence.
Pseudonymizing internal working documents, which are separate from the original deeds, reduces data exposure without affecting the legal value of the deeds.
The risks of non-compliance
Fines can reach 20 million euros or 4% of worldwide annual turnover. But the CNIL can also impose corrective measures, such as limiting or temporarily suspending a processing operation, which is enough to paralyze an office.
The notary also faces civil and disciplinary liability: data protection extends professional secrecy. And a leak of financial or estate data does lasting damage to client trust. Concrete cases are analyzed in 8 examples of HR data breaches.
Handling sensitive documents without storing them
Notary offices want to use AI to save time: summarizing an estate file, a first draft of a deed, proofreading a preliminary sale agreement, answering a client. The principle to apply: the tool never receives an identifiable document, and nothing is kept after processing. The method to pseudonymize a PDF contract also applies to draft deeds.
The GDPR principles to follow
Five principles guide how a working document is handled. Minimization first: share only what the task requires. Then limited retention: delete as soon as the purpose is achieved, with no leftover copies. Access is restricted to the people working on the file.
Traceability means logging who did what and when, without recording the content processed. And data protection by design (article 25) requires these rules to be built into the tool itself rather than bolted on afterwards.
Pseudonymize or anonymize?
Anonymization is irreversible: it suits statistics or a generic deed template. To work on a real file with AI, pseudonymization is more useful: names, addresses, land registry references and identifying amounts are replaced with aliases, and the mapping table, which stays at the office, lets you restore the real data in the result. The difference between pseudonymization and anonymization is explained in our guide on pseudonymization vs anonymization.
The flow, step by step
Start by mapping the documents involved: draft deeds, estate documents, correspondence. Then extract the text, with optical character recognition for scanned documents, and detect and replace identifying data: people, addresses, land registry references, tax ID numbers, and amounts if their combination makes the file recognizable.
That pseudonymized document is what you send to the AI tool. The real data is restored locally in the result, and temporary files are deleted, including caches and histories. A regular audit then checks that every category of data is covered.
The pitfalls
The first pitfall is re-identification through context: a town, a date of death and a family structure can be enough to recognize an estate. The second involves logs and caches: prompt histories and temporary files are often-forgotten leak vectors.
Providers are the third: anyone in the flow must be bound by an article 28 contract. The last pitfall is consumer tools: even with the best intentions, a personal account falls outside any contract between the office and the vendor.
Pro tip: Ask the vendor for contractual proof that no content is retained, reused for training or passed on to subprocessors. A sales commitment is not enough.
The most common mistakes
The most fundamental mistake is confusing the original deed with working documents: the first is kept intact, the second must be minimized. Other classic mistakes: sending an identifiable draft deed to a consumer AI assistant, and sending sensitive documents by unencrypted email.
Two oversights also come up often: land registry and tax references, which identify a person as surely as a name, and adding new tools to the register.
Safe-doc for notary offices
A notary office does not need to hand its files to yet another platform. Safe-doc stores nothing: the draft deed or estate document is pseudonymized, sent to the AI as aliases, and the real data is then restored in the result, at the office.
The tool sticks to that one job and needs no special training: drop in the document, check what was masked and add anything missing, then send. See how it works.
Frequently asked questions
Is the notary the controller?
Yes, for the data they collect and process in connection with their deeds. They answer for its lawfulness, security and retention period.
Can a client ask for their data to be deleted from a deed?
Not from the original deed: the law requires it to be kept. The right to erasure can, however, apply to other data, such as data used for marketing.
Does a notary office need to appoint a DPO?
Because notaries carry out a public service mission, appointing a DPO is generally considered mandatory. The role can be shared between offices.
Can a notary use ChatGPT or Claude?
Yes, on pseudonymized working documents, with a tool covered by a suitable contract, and never on an original deed or an identifiable file.
What are the penalties for non-compliance?
Administrative fines of up to 4% of worldwide turnover, corrective measures, and civil and disciplinary liability for the notary.
Further reading
- Lawyers: using ChatGPT and Claude without breaching professional secrecy
- Pseudonymizing PDF contracts: the complete guide for legal teams and DPOs
- Transfers outside the EU and pseudonymization: what the law says in 2026
Sources
This article is general information and does not replace advice from a qualified lawyer. Consult a legal professional about your situation before acting on this content.