Right to Nominate
Plain English Translation
Under Section 14 of the Act, you must provide a mechanism for users to exercise their digital nomination rights. This effectively allows for digital succession planning India style, where a user can appoint a specific individual to manage their personal data in the unfortunate event of their death or incapacity. This right to nominate DPDP mandate ensures that a verified nominee for data principal India can step in to exercise rights like access, correction, or erasure when the original user is unable to do so due to unsoundness of mind or infirmity of body.
Technical Implementation
Use the tabs below to select your organization size.
Required Actions (startup)
- Add a field in the user settings for 'Legacy Contact'.
- Handle claims manually via support email.
- Verify death certificates manually before releasing data.
Required Actions (scaleup)
- Automate the nomination invite email to the appointed individual.
- Create a dedicated support queue for incapacity and nomination claims.
- Log all actions taken by a nominee in the audit trail.
Required Actions (enterprise)
- Full self-service Legacy Contact portal with automated ID verification integration.
- Granular permission settings allowing users to decide what data the nominee can access.
- Real-time alerts to the DPO when rights are exercised by a nominee.
It is the right of a Data Principal to nominate an individual who shall exercise their rights in the event of death or incapacity (Section 14(1)).
Section 14(1) states the Data Principal can nominate 'any other individual'. The specific manner of nomination may be prescribed by future rules.
The nominee's rights activate only in the event of the death or incapacity of the Data Principal (Section 14(1)). Incapacity includes unsoundness of mind or infirmity of body (Section 14(2)).
The nominee shall exercise the rights of the Data Principal in accordance with the provisions of the Act and the rules made thereunder (Section 14(1)).
While Section 14 doesn't explicitly detail revocation, the right to nominate generally implies the right to change or update that nomination, similar to updating consent.
The Act states the Data Principal 'shall have the right to nominate' (Section 14(1)). This implies it is an option available to the user, not a mandatory requirement for them to fulfill.
The Act is silent on intestate succession of digital data. Without a nomination, standard inheritance laws or the fiduciary's internal policy for deceased users would likely apply.
For children, the rights are exercised by the parent or lawful guardian (Section 2(j)(i)). The right to nominate in Section 14 primarily addresses death or incapacity of the principal themselves.
"A Data Principal shall have the right to nominate, in such manner as may be prescribed, any other individual, who shall, in the event of death or incapacity of the Data Principal, exercise the rights of the Data Principal in accordance with the provisions of this Act and the rules made thereunder."
"For the purposes of this section, the expression "incapacity" means inability to exercise the rights of the Data Principal under the provisions of this Act or the rules made thereunder due to unsoundness of mind or infirmity of body."
| Version | Date | Author | Description |
|---|---|---|---|
| 1.0.0 | 2026-02-08 | WatchDog Security GRC Wiki Team | Initial publication from DPDP Workbook |
