/The Act · Chapter III · Rights and Duties of Data Principal
Section 14: Right to nominate
DPDP Act, 2023 (No. 22 of 2023). Comes into force on 13 May 2027.
- Provision
- Section 14 of The Digital Personal Data Protection Act, 2023
- Status
- Comes into force on 13 May 2027 (phase 3) G.S.R. 843(E)
- Rules made under it
- Rule 14
- Source
- Ministry of Law and Justice (Legislative Department) · 11 August 2023 · Official PDF
A Data Principal shall have the right to nominate, in such manner as may be prescribed, any other individual, who shall, in the event of death or incapacity of the Data Principal, exercise the rights of the Data Principal in accordance with the provisions of this Act and the rules made thereunder.
For the purposes of this section, the expression “incapacity” means inability to exercise the rights of the Data Principal under the provisions of this Act or the rules made thereunder due to unsoundness of mind or infirmity of body.
Section 14 of the Act gives a Data Principal (the individual to whom the personal data relates) the right to nominate another person to act on their behalf. This chosen individual is authorized to exercise the Data Principal's rights under the Act and its rules. However, the nominee cannot exercise these rights at any time they choose. They may only step in to exercise these rights in the specific event of the Data Principal's death or incapacity.\n\nThe exact process and manner for making this nomination are not detailed in the Act itself. Instead, the Act states that the method for nominating someone will be prescribed by rules. Until those rules are prescribed, the specific steps for nomination are not set out in this section.\n\nThe law also provides a specific definition for the term incapacity. For the purposes of this section, incapacity means that the Data Principal is unable to exercise their rights under the Act or its rules due to an unsound mind or an infirmity of the body. This ensures that the transfer of rights only happens under strictly defined circumstances.
Key points
- A Data Principal has the right to nominate another individual to exercise their rights under the Act. [(1)]
- The nominee can only exercise these rights in the event of the Data Principal's death or incapacity. [(1)]
- The specific manner for making a nomination will be prescribed by rules. [(1)]
- Incapacity is strictly defined as the inability to exercise rights due to unsoundness of mind or infirmity of body. [(2)]
Common misreadings
- A nominee can exercise the Data Principal's rights at any time, whereas the text states they can only do so upon the Data Principal's death or incapacity.
- Incapacity covers any reason a person cannot act, whereas the text limits it to unsoundness of mind or infirmity of body.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.