Grandparents as Digital Guardians in India: Legal Authority Over a Minor’s Online Accounts After Parental Death

Abstract

When both parents die, grandparents often become the primary caregivers of a minor. Yet Indian guardianship law does not directly answer who can manage the child’s social media, email, cloud storage, or gaming accounts. This article examines the current position under the Hindu Minority and Guardianship Act, 1956, the Guardians and Wards Act, 1890, and the Digital Personal Data Protection Act, 2023, with updated position as of September 2026. It identifies gaps in statutory recognition, platform practice, and data protection, and proposes a limited digital guardianship framework that separates guardianship status, account access, and data processing.

 

1. Introduction

 

A child’s digital life begins early. School portals, UPI wallets for minors, YouTube channels, and years of photos stored in the cloud are now routine. In practice, these accounts may contain information, records, intellectual property, financial interests, subscriptions, or other digital materials that require protection and management.

 

They are not all property in the strict legal sense. A social media account is typically a contractual licence governed by Terms of Service. Cloud storage may contain personal data, communications, photographs, and intellectual property. A gaming account may include virtual items and subscriptions. Each raises different legal questions.

 

When parents die, grandparents commonly assume caregiving responsibilities. The legal problem is that family law speaks of person, property and welfare, while technology platforms speak of account ownership, credentials and privacy policies. There is no direct statutory bridge between the two in India yet.

 

This article separates four layers: current law, platform practice, legal uncertainty, and proposed reform.

 

2. Current Law: Who is Guardian After Parents?

 

A. Hindu Minority and Guardianship Act, 1956 – limited to Hindus

 

Section 6 of the Hindu Minority and Guardianship Act, 1956 identifies natural guardians of a Hindu minor. For a Hindu minor, natural guardians in the relevant cases are the father, and after him, the mother, in the statutory sequence. Grandparents are not listed as natural guardians merely by virtue of being grandparents.

 

Section 8 deals with powers of a natural guardian. It concerns powers regarding the minor’s person and property and imposes restrictions on certain property transactions, including prior court permission for specific dealings with immovable property. The Supreme Court has treated Sections 6 and 8 together when analysing who is a natural guardian and what powers attach. 

 

A central question for digital accounts is whether managing such accounts amounts to management of the minor’s person, management of property, control over personal data, or merely contractual account access. Guardianship statutes were not drafted with this distinction in mind.

 

Section 13 makes welfare of the minor the paramount consideration in appointment or declaration of a guardian under the Act.

 

B. Guardians and Wards Act, 1890 – general law

 

The Guardians and Wards Act, 1890 is a secular guardianship statute. Section 7 empowers the court to make an order appointing or declaring a guardian of the person or property where it considers that such an order is for the welfare of the minor.

 

For a Hindu minor, a grandparent is not a natural guardian under Section 6 HMGA merely by being a grandparent. Where formal guardianship authority is required, appointment or declaration under applicable guardianship law may be sought from the competent court.

 

It would be overbroad to state that every grandparent must obtain a Section 7 GWA order in every case after both parents die. Whether a formal order is needed depends on facts, personal law applicable, and what authority is being asserted. Where a third party such as a school, bank, or technology platform asks for proof of legal authority, a court order becomes practically necessary.

 

C. Welfare – two provisions together

 

Welfare is governed by both Section 13 HMGA and Section 17 GWA. Section 17 GWA expressly directs the court, in appointing or declaring a guardian, to be guided by what appears to be for the welfare of the minor and to consider matters including the character and capacity of the proposed guardian, nearness of kin, wishes if any of a deceased parent, and any existing or previous relationship, along with the preference of the minor if old enough to form an intelligent preference.

 

Any discussion of guardianship after parental death should therefore refer to Section 13 HMGA and Section 17 GWA together, not to Section 13 alone.

 

3. Does Guardianship Automatically Mean Account Access? No.

 

This distinction is central and should not be conflated.

 

We must separate:

 

A. Guardianship – legal authority over the person or property of the minor recognised by statute and court.

 

B. Account access – technical and contractual permission granted by a platform to access an account, subject to Terms of Service and privacy policies.

 

C. Data processing – authority to consent to or control processing of personal data under data protection law.

 

A court can appoint a person as guardian. That does not automatically mean Instagram must give that person the password. Likewise, being authorised by a platform to download an archive does not mean the person owns every item contained in the account.

 

Platform policies, applicable law, account terms, privacy rights of third parties, and the specific type of information requested can still matter even where a court order exists.

 

4. Digital Personal Data Protection Act, 2023 – Commencement Correction

 

Section 9 of the DPDP Act, 2023 deals with processing of personal data of children. The Explanation expressly includes lawful guardian within the definition of parent. It provides that before processing a child’s personal data, the Data Fiduciary must obtain verifiable consent of the parent or lawful guardian.

 

Important update as of September 2026: Under the notified commencement framework for the DPDP Act, the group of provisions that includes Section 9 is not yet in force as of 10 September 2026. It is scheduled to commence 18 months from the specified publication date, with 13 May 2027 as the computed date for this batch.

 

Therefore the correct statement is: Section 9 of the DPDP Act, 2023, once brought into force, will require verifiable consent of the parent or lawful guardian before processing personal data of a child below 18.

 

A court-appointed guardian under the GWA would qualify as lawful guardian for this purpose once Section 9 is operational. However, the DPDP Act does not create a succession mechanism for accessing existing accounts after parental death. Data-protection consent is not the same as succession, which is not the same as guardianship, which is not the same as platform account access.

 

5. IT Act, 2000 – Sections 43 and 66 Need Precise Reading

 

Section 43 applies where a person, without permission of the owner or person in charge of a computer, computer system or network, engages in specified acts such as accessing, downloading, or introducing data. It creates civil liability.

 

Section 66 provides that if any person dishonestly or fraudulently does any act referred to in Section 43, he shall be punishable.

 

It is therefore inaccurate to say that any login without platform authorization is automatically illegal under Section 43. Whether accessing a particular online account falls within these provisions would depend on facts, the nature of the system, the existence of permission or authority, and whether the conduct was dishonest or fraudulent for purposes of Section 66.

 

To reduce risk, a grandparent should obtain court authority and approach the platform through its prescribed process rather than using the child’s credentials.

 

6. Platform Practice – What Was Verified

 

Platform procedures change, and must be quoted from current help pages at the time of application. Based on help pages reviewed in August-September 2026:

 

Meta: Provides separate processes for accounts of children and for memorialization. A parent or legal guardian may request certain information or management actions concerning an underage child’s account, subject to documentation such as proof of relationship or legal guardianship and identity.

 

Google: Offers Inactive Account Manager and processes for deceased users that may require death certificate and proof of authority. These tools were designed for adult account holders.

 

Apple: Offers a Legacy Contact mechanism allowing designated persons to access certain categories of data after the account holder’s death, subject to conditions such as an access key and death certificate. It distinguishes between stored data and credentials. For example, Apple notes that a Legacy Contact can access certain data but does not obtain passwords, passkeys, or iCloud Keychain data.

 

No major platform reviewed offered a dedicated grandparent dashboard. That observation is limited to platforms reviewed and should not be stated as a universal claim about all platforms.

 

A platform may require evidence of legal authority before considering a request involving a minor’s account, and the precise requirements depend on the platform and nature of requested access. A court order specifically mentioning digital assets will provide a stronger basis for a request, but it does not guarantee automatic compliance.

 

7. Case Law Position – Qualified Statement

 

No directly on-point Indian Supreme Court or High Court decision was identified in the authorities reviewed for this article addressing whether a guardian’s statutory authority extends specifically to a minor’s social media or cloud account.

 

This formulation reflects the scope of research undertaken and avoids an absolute claim that no judgment exists anywhere.

 

For welfare and guardianship principles generally, Indian courts have consistently held welfare to be paramount, under Section 13 HMGA and Section 17 GWA. Those decisions remain relevant, but they predate the current digital accounts context.

 

8. What a Guardian Does and Does Not Automatically Get

 

To avoid misleading readers, this distinction should be explicit:

 

Guardian of person – does not automatically give access to every online account or private message.

 

Guardian of property – does not automatically give ownership of contractual licences like social media accounts.

 

Court order mentioning digital assets – provides a stronger basis for a platform request, but subject to platform procedure.

 

Platform approval to secure or download – limited to what the platform permits, not full password takeover.

 

Account password or private messages – should receive heightened protection; disclosure should require specific judicial findings where privacy interests are implicated.

 

Photos, school records, financial records – may justify preservation or supervised access depending on authority and welfare.

 

Child’s own objection – should be considered according to age, maturity and welfare under Section 17 GWA.

 

9. Proposed Reform – Limited Digital Guardianship (Policy, Not Current Law)

 

This section is expressly a proposal.

 

Pillar 1: Statutory Recognition

 

Amend HMGA and GWA to define digital assets and digital accounts to include categories such as personal data, communications, intellectual property, financial interests and contractual licences. Allow a time-bound summary procedure before the competent guardianship court or family court where jurisdiction exists, with a proposed outer period of 30 days, for listing specific accounts for preservation.

 

Pillar 2: Platform Verification Gateway

 

Create an India-specific verification flow: court order, death certificates, minor’s identity. Platforms to provide three options only in standard cases: secure the account to prevent deletion, provide a one-time archive download, or close the account. Access to private communications to require separate reasoned judicial authorization.

 

Pillar 3: Fiduciary Duty and Transition, Not Just Sunset

 

A guardian must act in best interest, keep records, avoid self-dealing, and respect privacy. Authority over active account administration should transition to the child on attaining majority. For historical records, the order should provide for preservation and handover rather than automatic deletion at 18.

 

10. Conclusion

 

At present, for a Hindu minor, grandparents are not natural guardians under Section 6 HMGA merely by being grandparents. Where formal authority is needed to deal with third parties including platforms, appointment or declaration may be sought under applicable guardianship law, with welfare under Section 13 HMGA and Section 17 GWA being central.

 

Even with guardianship status, account access and data processing remain distinct issues governed by platform terms and, once brought into force, the DPDP Act. Platforms will assess requests based on their current policies and documentation.

 

Until Parliament or courts address this specifically, children risk losing access to educational records, photographs, and other materials. A limited, fiduciary, court-supervised digital guardianship model can fill the gap while respecting the child’s evolving autonomy.

 

References

 

1. Hindu Minority and Guardianship Act, 1956, No. 32, Acts of Parliament, 1956 – Sections 6, 8, 13.

2. Guardians and Wards Act, 1890, No. 8, Acts of Parliament, 1890 – Sections 7, 17.

3. Digital Personal Data Protection Act, 2023, No. 22, Acts of Parliament, 2023 – Section 9 and commencement notification framework – Section 9 not in force as of 10 September 2026, scheduled batch commencement 13 May 2027.

4. Information Technology Act, 2000, No. 21, Acts of Parliament, 2000 – Sections 43, 66.

5. Meta Help Center – Accounts for Children and Memorialization policies – accessed September 2026.

6. Google Account Help – Inactive Account Manager and requests regarding deceased users – accessed September 2026.

7. Apple Support – Digital Legacy and Legacy Contact – access categories and exclusions – accessed September 2026.

8. Uniform Law Commission, Revised Uniform Fiduciary Access to Digital Assets Act, 2015 – comparative reference.

 

Disclaimer: This article is for academic and informational purposes only. It does not constitute legal advice. Platform policies and commencement status should be verified immediately before any application.

 

FAQs – Corrected

 

Q1: Are grandparents automatically natural guardians if parents die?

For a Hindu minor under Section 6 HMGA, natural guardians are father and then mother in the statutory sequence. A grandparent is not listed as natural guardian merely by being a grandparent. Where formal proof of authority is required, an order under applicable guardianship law may be sought.

 

Q2: Can a court order specifically mention digital accounts?

Yes, and it is advisable to request specific language authorising management of the minor’s digital assets and online accounts, with purposes specified as security, preservation, or closure.

 

Q3: Will Google or Instagram give access just because I am a grandparent?

No. A platform may require evidence of legal authority, such as a court-appointed guardianship order, plus death certificates and identity documents. Requirements vary by platform.

 

Q4: Is it illegal to log in to a child’s account?

Section 43 IT Act creates civil liability for certain acts done without permission of the owner or person in charge of a computer system. Section 66 makes relevant Section 43 conduct punishable when done dishonestly or fraudulently. Whether a particular login falls within these provisions depends on facts and authority. Obtaining court authority and using platform processes reduces risk.

 

Q5: Does the DPDP Act allow a guardian to consent for a child?

Section 9, once brought into force, will require verifiable consent of parent or lawful guardian for processing a child’s data. It does not create a procedure for accessing existing accounts after a parent’s death.

 

Q6: What should be in a digital guardianship petition?

List specific accounts, state purpose – secure, preserve, obtain archive, close – explain how it serves welfare under Section 13 HMGA and Section 17 GWA, and distinguish between account preservation and access to private communications.