Protecting Identity Documents During Remote Online Notarization

Remote Online Notarization (RON) makes it possible to notarize documents from home using your computer or phone. It’s fast and convenient, but it also requires you to scan or photograph your driver’s license or passport and show it live on camera. Those identity documents are valuable targets for criminals and data brokers if they’re stored or shared carelessly. This guide explains how RON works, what happens to your ID data, the privacy and fraud risks to consider, and practical steps to keep your identity documents safe before, during, and after your remote notarization.

How Remote Online Notarization Works

Most RON platforms follow a similar process:

• Account and consent: You accept disclosures, consent to recording, and agree to identity checks.
• ID verification: You upload photos of your government ID and complete liveness checks (moving your face, turning your head). Some states also require knowledge-based authentication (KBA) questions pulled from credit header data.
• Live video session: You meet the commissioned online notary via webcam. The session is recorded and stored as part of the notarial record (the journal and “audio-video recording”).
• Document signing and seal: You e-sign the document; the notary applies a digital certificate and e-seal. The platform generates an audit trail.
• Record retention: The notary and/or the platform must keep specific records for a defined period set by state law (often 5–10 years), which may include your video session, ID verification results, and parts of your document metadata.

Each step can involve sensitive data. Understanding where that data lives and how long it’s stored is key to protecting your identity documents.

What Happens to Your ID Images and Session Recording

When you upload your driver’s license or passport, the platform typically:

• Captures images and extracts data: Optical character recognition may read your name, address, license number, and date of birth. Barcodes on IDs may be decoded.
• Performs authenticity checks: The system compares security features and face matches between your selfie and the ID photo.
• Stores verification artifacts: Depending on policy, it may store the raw images, cropped faces, verification scores, and a reference number tied to your session.
• Records the video meeting: The “audio-video recording” typically shows your face, voice, and sometimes parts of your ID as you present it on camera.

Retention rules vary by state and platform. Some notaries may store only the video and verification outcome, while others may keep raw ID images. Always ask for the written retention policy before you begin.

Key Privacy and Security Risks

• Over-collection and long retention: Storing full ID images and barcodes longer than necessary increases exposure if a breach occurs.
• Third-party analytics and vendors: Verification providers, cloud storage, and analytics tools may access or process your data.
• Recording leaks: If session recordings are mishandled, your face, voice, and personal details could be exposed.
• Phishing and fake RON sites: Fraudsters imitate legitimate platforms to harvest IDs.
• Re-use of data beyond notarization: Without strict contracts, data could be used for training, advertising, or shared with data brokers.
• Cross-border storage: Data stored outside your jurisdiction may get weaker legal protections.

How to Vet a RON Platform or Provider

Before uploading any identity document, perform a quick but thorough check:

• Confirm legitimacy: Verify the notary’s commission on your state’s website. Confirm the platform is approved for RON in your state.
• Read the privacy policy and retention schedule: Look for clear answers to what they collect, why, where it’s stored, who it’s shared with, and how long it’s kept. Seek language that supports data minimization and deletion rights.
• Ask direct questions:
  • Do you store raw images of my ID? For how long? Can they be deleted after the session?
  • Which vendors process my ID or video? Are they limited to notarization only?
  • Where (geographically) are video and ID data stored? Are they encrypted at rest and in transit?
  • How do you protect the audio-video recording? Who has access to it and under what circumstances?
  • What is your incident response plan and past breach history?
• Check security practices: Require MFA for your account, TLS for all connections, and evidence of encryption, audit logging, and restricted access to recordings and ID data.
• Review deletion and access rights: Confirm whether you can request deletion of uploaded ID images after verification (subject to state law) and how to request a copy of the recording or audit trail if needed.

Preparing Your Identity Documents Safely

Small measures at the start can reduce risk dramatically:

• Use a dedicated device or profile: Prefer a personal device you control. Create a separate user profile for sensitive tasks to reduce cross-app access.
• Update and secure your device: Install OS and browser updates, enable full-disk encryption, and use reputable antivirus. Turn on your device firewall.
• Use a private, secure network: Avoid public Wi‑Fi. If unavoidable, use a trusted VPN and disable auto-connect on unknown networks.
• Prepare your ID photos carefully: Take photos directly within the platform if possible. If you must capture them first, store them temporarily in an encrypted folder and delete them securely after the session.
• Close sensitive apps: Shut down screen recorders, messaging pop-ups, or cloud backup prompts that could inadvertently capture or sync your ID images.
• Minimize visible background: During the video, remove documents, mail, or whiteboards with personal details from the camera’s view.

Best Practices During the Notarization Session

• Verify the URL and certificate: Enter the platform URL manually or use a saved bookmark. Check for a valid HTTPS certificate and correct domain name.
• Check the notary’s identity: Ask the notary to show their digital commission details and full name—match it with your state’s notary registry if needed.
• Show only what’s necessary: When holding your ID to the camera, avoid lingering. Do not read your ID number aloud unless required by law.
• Clarify data handling: Before proceeding, confirm whether your raw ID images will be retained and request deletion after verification if permitted.
• Record your own notes: Write down the notary’s name, commission number, platform, date/time, and any reference numbers. This helps if you later need to request data deletion or an audit copy.

After the Session: Clean-Up and Monitoring

• Delete local images securely: Remove any saved ID photos from your device and cloud backups. Empty the recycle bin and consider a secure delete utility.
• Request deletion of uploads: If allowed by law and policy, email the platform or notary requesting deletion of raw ID images and non-required artifacts. Ask for written confirmation.
• Limit sharing of the recording: If you obtain a copy for your records, store it in an encrypted drive or password manager-secured vault.
• Enable ongoing monitoring: Because RON often uses credit-based identity checks, watch for unusual credit inquiries, new accounts, or changes that could signal misuse. A dedicated privacy and credit monitoring tool can alert you quickly to suspicious activity; consider enrolling with a service such as SmartCredit to track identity-related financial changes and get notified of potential fraud.
• Update your password manager entry: Save the platform login, note retention details, and set a reminder to follow up on any pending deletion requests.

Understanding Legal and Regulatory Basics

While laws vary by state, common elements shape how your data must be handled:

• Record retention requirements: Many states require remote notaries to keep an electronic journal and the audio-video recording for several years. This does not always require storing raw ID images—ask what’s mandatory versus optional.
• Disclosure and consent: You must be informed about recording and identity checks. Read and save these disclosures.
• Access and security obligations: Notaries and platforms must restrict access to their journal and recordings. Breach notification rules may apply if your data is exposed.
• Consumer privacy laws: In some jurisdictions, privacy laws grant rights to access or delete certain data. However, statutory notarial records may be exempt from deletion. Clarify which records you can remove.

Red Flags That Signal Extra Caution

• Vague or missing privacy policy: If the platform cannot explain retention timelines or sharing practices, reconsider.
• Requests for unrelated data: Demands for Social Security numbers when not required, or requests to upload multiple IDs without explanation.
• Unverified downloads: Prompts to install unknown plugins or sideload apps to proceed.
• Pressure tactics: Urgency, discounts expiring “in minutes,” or refusal to answer simple security questions.
• Non-matching notary details: If the notary’s name or commission cannot be verified with the state.

Data Minimization Tactics You Can Use

• Provide only what’s required: If the platform accepts a single government ID, don’t upload additional documents.
• Session-only permissions: Grant camera and microphone access only in the browser for the current session, then revoke them in your browser settings afterward.
• Temporary storage controls: If you must save ID photos, store them in an encrypted container and delete them as soon as the session ends.
• Separate email alias: Use an email alias unique to the platform to limit downstream marketing or data matching.
• Minimal on-camera exposure: Keep personal mail, diplomas, and family photos out of frame to avoid capturing extra identifiers.

FAQ: Common Questions About RON and Identity Document Safety

Can I blur parts of my ID?

Generally no. The platform needs to read your ID to verify authenticity. You can, however, avoid reading numbers aloud and show the ID only when asked.

Will the notary keep my ID forever?

No. Retention periods are limited by law and policy. Many providers keep the audio-video recording and verification results for a set period but do not need the raw ID images long term. Ask for their exact schedule and deletion options.

Is KBA safe?

KBA pulls from credit header and public records. It doesn’t expose your full credit file to the notary, but it indicates your identity data is used to generate questions. Because of this connection, monitor your credit for unusual activity after completing RON.

What if I suspect a fake RON site?

Stop immediately. Do not upload your ID. Verify the correct URL through your state’s list of approved platforms or by contacting the business that referred you. Consider freezing your credit and using monitoring if you already uploaded data.

Can I request a copy of the recording?

Sometimes. Access depends on state law and platform policy. Ask the notary how to request access and whether fees apply.

Step-by-Step Privacy Checklist

1. Verify the platform and notary are approved in your state.
2. Read the privacy policy and data retention terms; clarify what’s mandatory.
3. Enable MFA on your account and update your device/browsers.
4. Use a private network and close unrelated apps.
5. Capture ID images only if required, then delete them securely after.
6. During the session, confirm what will be stored and for how long.
7. Write down session details for your records.
8. Request deletion of raw ID images when allowed; keep confirmations.
9. Store any copies of documents or recordings in encrypted storage.
10. Monitor your credit and identity signals for unusual activity in the weeks following the notarization.

Conclusion

Remote Online Notarization can be both convenient and safe when you take a few deliberate steps to protect your identity documents. Verify the provider, understand what data is collected, limit unnecessary sharing, and request deletion of raw ID images when possible. Secure your device and network, keep careful notes, and monitor for any signs of identity misuse afterward. With these habits in place, you can complete notarizations online without turning your most sensitive documents into long-term privacy liabilities.