Under India’s Digital Personal Data Protection (DPDP) Act, someone else can exercise your personal data rights after your death.
Section 14 gives Data Principals the right to nominate another individual to exercise their rights in the event of death or incapacity.
Rule 14(4) provides for nominations in accordance with the Data Fiduciary’s terms of service and applicable law.
This creates an interesting compliance question for organisations.
Suppose a customer dies, and their nominated individual requests access to information or erasure of personal data.
Does your organisation have a process to verify the nomination and handle the request?
The takeaway: Data Principal rights management should include nomination mechanisms and procedures for dealing with nominated individuals.
This article is general information, not legal advice.