BACK TO DPDP ACT
DPDP Act 2023

Section 14

Right to Nominate

THE STATUTE

Original Text

(1) A Data Principal may, in such manner and subject to such conditions as may be prescribed, nominate any other individual, who shall, in the event of death or incapacity of the Data Principal, exercise the rights of the Data Principal under the provisions of this Act.

Simplified

Section 14 is a uniquely Indian innovation in data protection law — the right to nominate a person to exercise your data rights after death or in the event of incapacity. No GDPR equivalent exists; GDPR simply does not apply to deceased persons (Recital 27), leaving data rights to expire at death. The DPDP Act takes a different approach: a Data Principal can designate a nominee — during their lifetime — to step into their data rights shoes after death or if they become incapacitated and cannot exercise rights themselves. The nominee could exercise any right the Data Principal held: the right to access information (Section 11), the right to correction and erasure (Section 12), the right to grieve (Section 13), and the right to withdraw consent (Section 6). This provision has profound implications for digital estate planning — India now has a statutory mechanism for posthumous data rights management. In practical terms: a person who has extensive medical records, financial data, photographs, and communications held by various platforms can designate a family member to access, correct, or delete that data after they die. Platforms will need to create nominee verification and activation processes — distinguishing between legitimate nominees exercising rights and fraudulent claims. The DPDP Rules will specify the form of nomination, conditions for its validity, how nominees authenticate themselves, and how platforms must respond to nominee requests. The incapacity angle is equally important for persons with progressive illnesses — they can designate someone to manage their data rights while they still have capacity, ensuring continuity of protection.

Common Queries

Yes. Section 14 allows any Data Principal to nominate any other individual. The DPDP Rules will specify the form and conditions for a valid nomination — likely requiring the nomination to be made in writing or through a prescribed electronic process.
A nominee steps into the Data Principal's full set of rights under the DPDP Act — including the right to access personal data summaries, request correction or erasure, withdraw consent, and file grievances.
Not automatically. But your nominee could exercise the Section 12 right to erasure on your behalf — requesting deletion of data that is no longer necessary. Whether deletion is compelled depends on whether any legal retention obligation applies.
Section 14 only creates the nomination mechanism; it does not provide a default nominee (like a next-of-kin) for persons who die or become incapacitated without nominating someone. The DPDP Rules may address this gap.

Legal Context

The right to nominate was not in earlier draft bills. It was added to the final DPDP Act 2023 to address the growing importance of digital personal data as part of an individual's life — and the gap that existed when that individual could no longer manage their own data. India's tradition of nominee designations in insurance, banking, and financial products provided the conceptual framework for importing this mechanism into data protection.

Key Rules & Provisions

Unique innovation with no GDPR equivalent — posthumous and incapacity data rights through nomination.

Covers both death and incapacity — addresses progressive illness and accident scenarios.

DPDP Rules to specify nomination form, conditions, and verification procedures.

Nominees exercise all Data Principal rights — not just a limited subset.

Related Case Laws

Trilok Chand Mohan Lal v. State of Punjab (1969)

AIR 1969 SC 1168
RELEVANCE

This early Supreme Court case recognised that rights under contract or statute do not automatically lapse at death — the nominee/legal representative may step into the rights-holder's shoes. Section 14's nomination mechanism reflects this principle: Data Principal rights survive the individual and can be exercised by a nominee.