Data protection · Provision

Section 14, DPDP Act 2023 — Right of Data Principal to Nominate

A Data Principal may nominate another individual to exercise her data rights in the event of death or incapacity. (Section 14, Digital Personal Data Protection Act, 2023.)

Quick Statutory Answer

Under Section 14 of the DPDP Act 2023, a Data Principal has the legal right to nominate another individual who shall exercise her statutory rights (such as data access, correction, erasure, and grievance filing) in the event of her death or mental/physical incapacity. Data Fiduciaries must provide a clear mechanism in user profiles or settings to record, update, and authenticate valid nominee appointments.

Check your compliance exposure — free All provisions

What the section does

  • A Data Principal has the right to nominate, in the manner prescribed, another individual who will exercise her rights under the Act in the event of her death or incapacity.
  • Incapacity is defined by the section as an inability to exercise rights under the Act by reason of unsoundness of mind or infirmity of body.
  • The nominee steps into the statutory rights conferred by the Act — including access, correction, erasure, and grievance redressal — rather than acquiring property rights over data.
  • Data Fiduciaries must maintain technological workflows in their user accounts to register and verify nominated representatives.

Section 14 DPDP Act: Nominee Rights & Authentication Framework

Section 14 DPDP Act: Nominee Rights & Authentication Framework
Event / Trigger Statutory Scope Nominee Authority Verification Required by Fiduciary
Death of Data Principal Section 14(1) Exercise all Section 11 & 12 rights (Access, Erasure) Official death certificate & nominee KYC verification
Incapacity (Mental/Physical) Section 14(2) Manage consent and privacy requests on user behalf Medical certificate confirming incapacity & nominee ID
Revocation / Update Section 14(1) Principal may change nominee at any time during life Direct authenticated user confirmation

On death or incapacity

Nominee exercises rights. The nomination makes data privacy rights survivable and enforceable by trusted representatives.

Where people go wrong

  • Having no online workflow for users to specify a nominee in account settings.
  • Assuming that a general legal heir automatically overrides an explicitly appointed Section 14 nominee.
  • Releasing confidential personal data to unverified claimants without proper certification.

Common questions

What is the right to nominate under Section 14 of the DPDP Act?

Section 14 allows a Data Principal to designate another person to exercise her data privacy rights (including obtaining records or requesting deletion) in the event of her death or incapacity.

Can a user change their DPDP nominee?

Yes. A user can update or revoke their nomination at any time through the profile settings provided by the Data Fiduciary.

Act on this

  • Section 11 — right to access
  • Section 12 — correction & erasure
  • Free DPDP readiness quiz

Other provisions

  • Section 15, Digital Personal Data Protection Act
  • Section 13, Digital Personal Data Protection Act
  • Section 17, Digital Personal Data Protection Act
  • Section 12, Digital Personal Data Protection Act
  • Section 32, Digital Personal Data Protection Act
  • Section 10, Digital Personal Data Protection Act

Maintained by the VidhiSar Legal Team

Maintains the law explainers, calculators, templates and blog posts on vidhisar.in: checks them against the statute text and updates them when the law changes. Errors and changes in the law can be reported to legal@vidhisar.in.

About this summary

A plain-English summary of what this provision requires, not a reproduction of it and not legal advice. Read alongside the bare Act, and take advice on anything turning on your own facts.