Who owns a person’s digital data after their death?

Wait 5 sec.

Earlier this month, a civil court in Gandhinagar recognised stored digital data in an iCloud account as “property” and part of a deceased person’s estate.The case arose after the deceased man’s family was unable to access his locked iPhone and the linked iCloud account. They said it contained “valuable personal data of emotional, sentimental and practical significance” to them, including photographs, videos, documents, voice notes and contact lists.Increasingly, such cases are part of a larger shift in which courts are using succession laws to govern the new frontier of digital estates, while dealing with privacy concerns.To access the man’s phone, his family contacted Apple. The company informed them that under its terms of service, which contain a Digital Legacy clause, it could assist in recovering the cloud-stored data.But, this could happen only if “a court order containing specific declarations” formally appointed a legal representative who was authorised to act on behalf of the deceased.The deceased’s wife and daughter approached the court under the Indian Succession Act, 1925, seeking letters of administration, which the court provides when a person dies without a will. Judge Himanshu Choudhary allowed the petition, appointed the daughter as administrator of his estate and directed Apple to assist in recovering the data “to the extent technically feasible.”Digital information as propertyThe heirs argued that the law sufficiently contains broad definitions to recognise digital data as property, even without a dedicated statute governing digital inheritance. The court found merit in the argument, saying that “the digital data stored in the Apple iCloud account of the deceased constitutes a valuable digital asset forming part of the estate of the deceased.”Story continues below this adAlso Read | What happens when the dead don’t log off?To get there, the family relied on how existing laws define “movable property” and found that the language allowed for their inclusion.The General Clauses Act says movable property is “property of every description, except immovable property.” The BNS of 2023 similarly exempts everything except land and things fixed to it. The Prevention of Money Laundering Act goes further, pulling in incorporeal and intangible assets within the meaning of property.None of these statutes was drafted with iCloud accounts in mind, but the court found their definitions broad enough to accommodate them. It also pointed to the Income Tax Act, which already taxes cryptocurrencies and NFTs as virtual digital assets under Section 2(47A). The court reasoned that the law had quietly begun recognising digital things as property worth protecting.The court noted that these provisions were “sufficiently expansive to accommodate digital data within the conceptual scope of property.”The privacy angleStory continues below this adThere is another side to digital inheritance — online accounts often contain private conversations, personal notes and parts of a person’s life they may never have intended to share, even with family. Treating such accounts as inheritable property can therefore clash with privacy and dignity after death.Explained | Vijay swearing-in delay: Why Governor’s role has raised questions, what top court has said in the pastThe issue, then, is not just who inherits digital assets, but how far access to a deceased person’s private digital life should extend. The court said that while the right to privacy is a fundamental right, “it is an inherently personal right which is born with and extinguishes with the individual.”Applying the maxim actio personalis moritur cum persona, which means a personal right of action dies with the person, the court held that “no claim in respect of the right to privacy of the deceased can be sustained” and that it cannot “obstruct the lawful heirs from administering his digital estate.”Section 14 of the Digital Personal Data Protection Act, 2023, allows a person to nominate someone to exercise their data rights after death, but the law says nothing about what happens if no nominee is appointed. In that gap, the court held, the rights devolve on the legal heirs. Apple was thus directed to assist in recovering the data “to the extent technically feasible, in recovery of any locally stored data on the physical device.”Story continues below this adDigital property jurisprudenceLast year, the Madras High Court in Rhutikumari v. Zanmai Labs Pvt. Ltd. held that cryptocurrency constituted property capable of possession and beneficial enjoyment.That case arose after crypto holdings on the WazirX platform were frozen following a cyberattack that resulted in losses of around $230 million. The court drew on Supreme Court rulings that define property in the widest possible terms, as SC observed in Ahmed GH Ariff v CWT (1969), “every possible interest which a person can clearly hold or enjoy” and an “aggregate of rights which are guaranteed and protected by law… everything that has an exchangeable value or which goes to make up wealth or estate or status,” as under Jilubhai Nanbhai Khachar v State of Gujarat (1995).Applying that reasoning, the Madras court observed that “investment made by the user is converted into crypto currency, which is capable of being stored, traded and sold. Crypto currency is termed as a virtual digital asset and is governed under Section 2(47A) of the Income Tax Act, 1961.”The Gandhinagar case is more ordinary, as it concerns photographs, videos, cloud backups and data generated every day and stored in devices. The shift from financial instruments to personal data under the umbrella of digital assets matters because India’s legislation has not kept pace with rising levels of digital dependence.Story continues below this adThe IT Act, 2000, addresses cyber offences and unauthorised access but does not create inheritance rights over digital accounts. The Indian Succession Act predates the internet entirely. While the DPDP Act introduces the idea of nominating a person to exercise data rights after death, it does not comprehensively regulate digital inheritance.The Germany caseThe legal question before the Gandhinagar court was earlier confronted by the highest court in Germany.In 2012, a 15-year-old girl died after being struck by a train in Berlin. Her parents sought access to her Facebook account to understand the circumstances leading up to her death and to respond to legal claims arising from the incident. Facebook refused access, citing privacy.The dispute eventually reached the German Federal Court of Justice, which ruled in 2018 that the deceased user’s Facebook contract passed to the heirs under principles of universal succession, much like diaries or personal letters. The court held that the heirs had legally stepped into the deceased person’s position and were not “third parties” barred by confidentiality protections. It also found that EU data protection law did not prohibit such access because the General Data Protection Regulation (GDPR), one of the strictest digital privacy laws globally, does not apply to deceased persons.Story continues below this adFacebook was thus directed to provide the parents full access to the account. A later ruling specified that while heirs could access and read the account, they could not operate it as though they were the deceased user.