Right to nominate under DPDP

Audience: compliance owners, support leads, founders, operations teams · Last reviewed: March 2026

See also: Compliance portal · Official resources · Guides index

The right to nominate is one of the more distinct rights-related ideas in the DPDP framework. Many businesses will not see nomination-related requests every week, but that is exactly why they can mishandle them when one finally appears. If your team has never decided how it would record, verify, and act on a nomination-related request, the gap will show at the worst possible time.

What official text says

The DPDP framework recognizes a right to nominate another person who may exercise rights in specified circumstances. The exact legal text should be read carefully, especially around scope, triggering conditions, and the relationship between the original account holder’s records and any person claiming authority through nomination. This is not a topic to handle through guesswork or copied foreign privacy templates.

Because this area can intersect with death, incapacity, family disputes, or account access risk, official wording and business process both matter.

Practical meaning for companies

Most businesses should think through at least four questions:

• How, if at all, will a nomination be recorded and updated?
• What evidence will be accepted before acting on a nomination-related request?
• Who approves edge cases involving conflicting claims or incomplete records?
• What actions can be taken safely without creating account abuse or unauthorized disclosure risk?

If the product does not yet support formal nomination features, you may still need an internal review path for situations where a person claims the right to act on behalf of a data principal. That path should be cautious, documented, and escalated.

What a workable process looks like

1. Define whether nominations can be made proactively inside the product or only handled through support review.
2. Create a checklist for evidence, identity verification, and documentation.
3. Limit who can approve account or rights actions based on nomination-related claims.
4. Log each case with facts, documents reviewed, decision owner, and action taken.
5. Escalate ambiguous or contested cases instead of forcing frontline teams to guess.

Caveats

• Do not treat a nomination-related request as ordinary support access recovery.
• Do not disclose personal data before you are satisfied with authority and authenticity.
• Do not assume your current account settings already solve the legal and procedural issues.
• Do not forget record retention and auditability for sensitive decisions.

Official sources

Related guides