Privacy guide

What is the right to nominate under DPDP?

The DPDP right to nominate explained: how you can name someone to handle your data rights if you cannot, why it exists, and what it means in India.

The simple answer

The DPDP Act includes a right to nominate: you can name another person to exercise your data rights on your behalf in case of death or incapacity. It is a lesser-known but useful right.

It matters because your accounts and data do not vanish when you cannot manage them. A nominee can step in to act on your rights when you are unable to.

What to check

1
Know you may be able to name a nominee.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Think about who should handle your data if needed.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Look for nomination options as services adopt them.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Keep account and access details organised.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Your data outlives the moment.

State of Privacy treats data as long-lived, and the right to nominate reflects that: someone may need to act on your data even when you cannot.

What to do next

1
Decide who you would trust as a nominee.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Watch for nomination features in services.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Keep your important accounts documented for them.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

What is the right to nominate?

It is the DPDP right to name someone to exercise your data rights if you die or cannot act yourself.

Why does it matter?

Because your accounts and data persist, and a nominee can manage your rights when you are unable to.

How do I use it?

Look for nomination options as services implement DPDP, and decide whom you would trust.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience