Nominee / Nomination Right

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), the right to nominate allows a Data Principal to nominate another individual who may exercise certain rights of the Data Principal in accordance with the provisions of the Act. This provision ensures that individuals can designate a person to represent their interests regarding their personal data in specific circumstances.

The DPDP Act provides Data Principals with the ability to make a nomination in the prescribed manner. A nominee may exercise the rights of the Data Principal in the event of death or incapacity of the Data Principal, subject to the conditions and processes established under the Act and applicable rules. This enables continuity in managing privacy-related requests and interactions with Data Fiduciaries.

The nomination right is one of the rights provided to Data Principals under the DPDP Act. Organizations acting as Data Fiduciaries need to provide mechanisms that allow individuals to exercise this right, maintain appropriate records of nominations, and handle requests from valid nominees while ensuring appropriate verification and privacy safeguards.

In practice, gaps emerge when:

• Organizations do not provide a clear process for Data Principals to submit nominations.
• Nominee requests are handled without proper verification.
• Organizations lack records of nomination details and updates.
• Privacy workflows do not account for nominee-related requests.
• Teams are unclear about when nominee rights can be exercised.

Organizations address these challenges by implementing nomination workflows, maintaining records, verifying nominee requests, defining responsibilities, and integrating nomination handling into Data Principal rights processes. Within Privy, capabilities such as Data Principal rights management, privacy workflows, request tracking, and compliance reporting help organizations manage privacy requests and maintain operational visibility.