Authors: Myaka Sri Venya, Shambhavi Raj Singh, Samhitha Srinivas Veluvali, Rohini Gajanan Bhajbhuje, Krishna Minat

Abstract

The rapid rise of generative Artificial Intelligence (AI), deep learning, and synthetic media has turned our digital identities into highly valuable, long-lasting assets. Today, we leave behind sprawling “digital remains”—including social media archives, cloud drives, emails, photos, biometrics, and behavioral data—that outlive our biological bodies. Increasingly, tech companies use this data to build AI replicas that mimic a deceased person’s voice, face, and personality with uncanny accuracy.

While this opens amazing doors for historical preservation, education, and keeping memories alive, it also triggers a complex legal minefield surrounding consent, privacy, inheritance, and commercial exploitation. Current laws are fragmented globally: the United States leans heavily on commercial publicity rights and fiduciary access laws; the European Union prioritizes human dignity and data protection; while India anchors its approach in the constitutional right to privacy and the Digital Personal Data Protection (DPDP) Act, 2023. Yet, none of these regions features a unified framework to handle AI-driven digital resurrection. This paper explores these legal gaps and proposes a Unified Digital Afterlife Framework built on six core pillars to protect individual autonomy and human dignity in the age of AI.

Keywords: Artificial Intelligence, Digital Remains, Digital Resurrection, Digital Afterlife, Post-Mortem Privacy, Personality Rights, Right of Publicity, DPDP Act 2023, GDPR, RUFADAA, Digital Wills, Digital Executors.

Table of Abbreviations

1. Introduction: When Death Meets the Algorithm

For centuries, the law operated under a simple assumption: when you die, your privacy and personality rights die with you. Traditional estate planning was built to pass down physical property, money, and classic intellectual property. The digital age has completely broken this status quo. Modern life is recorded in real-time, leaving behind biometric data, voice recordings, and deep digital footprints. These archives serve as perfect training datasets for generative AI. Today, sophisticated natural language models and voice cloning tools can resurrect a deceased person as an interactive avatar, capable of having new conversations and mirroring real-life mannerisms.

This technology offers immense comfort for grieving families and incredible utility for education. But it also begs deeply unsettling questions:

“Who owns your digital ghost? Can a studio use your voice forever? Do your heirs get to decide, or do the tech platforms hold all the cards?”

Because current laws treat privacy, estate management, and AI regulation as completely separate silos, we are left with deep legal grey areas. This article analyses the legal approaches of the US, EU, and India, arguing that we desperately need a single, comprehensive legal structure to govern the digital afterlife.

2. The Current Debate: Literature Review & Research Gap

Legal experts have tried to address the digital afterlife using old legal tools, resulting in split philosophies:

• Identity as Property (The US View): Early pioneers like Melville B. Nimmer argued that an individual’s commercial identity is a transferable property right that can be passed down to heirs like an estate.
• The Anti-Monopoly Critique: Scholars like Michael Madow pushed back, warning that locking down public identities forever under strict copyright-style laws harms free speech, art, and historical scholarship.
• Identity as a Human Right (The European View): Edina Harbinja argues that digital remains are not just property; they are an emotional extension of who we are. Anita L. Allen echoes this, stating that privacy and dignity have ethical dimensions that shouldn’t vanish the moment a heart stops beating.
• The AI Dilemma: Emerging researchers like Giovanni Spitale and Federico Germani focus on the severe psychological and ethical dangers of AI resurrection—warning of deep public deception, emotional manipulation, and the absolute necessity for mandatory transparency labels.
• The Indian Standpoint: In India, scholars like Vijayalaxmi Methuku and Praveen Kumar Myakala point out that while the country is making massive strides in digital privacy, the exact rules regarding who inherits a digital asset or controls an AI replica remain muddy and uncodified.

The Research Gap

Property scholars look at the cash flow, privacy scholars look at human dignity, estate lawyers look at wills, and AI experts look at algorithms. They rarely talk to each other. This paper bridges that exact gap by creating a unified legal response to AI resurrection across three major legal landscapes.

3. The Business of Digital Resurrection & Estate Bottlenecks

Our digital remains are incredibly lucrative data goldmines. Entertainment companies, advertising agencies, and tech platforms are actively seeking ways to use the likenesses of deceased icons and everyday citizens alike. However, navigating who actually controls this data is incredibly messy.

The Access vs. Usage Problem

In the US, the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) gives executors the right to access a deceased person’s digital accounts based on a clear hierarchy: online platform tools first, wills second, and platform Terms of Service last. However, RUFADAA was written before the generative AI boom. It allows an executor to download an archive of photos or emails, but it completely fails to say whether an AI developer can use that data to train a chatbot.

The Property Route

Laws like California Civil Code § 3344.1 protect the commercial use of a deceased celebrity’s name, voice, or likeness for a set period, protecting the estate from unauthorized ads. A brilliant real-world example of proactive defence is the estate of actor Robin Williams, who famously used his trust to block the commercial exploitation of his digital likeness for 25 years after his passing. This highlighted the urgent need for comprehensive Digital Wills.

4. Global Comparison: Three Systems, One Shared Blind spot

Modern legal systems handle the digital afterlife through vastly different cultural and constitutional lenses:

A. The United States: Market-Driven & Property-Focused

The US relies heavily on state laws, contract law, and commercial publicity rights. It treats a person’s post-mortem likeness as a commercial asset. While it protects an estate’s wallet beautifully, it offers minimal protection for emotional distress, human dignity, or unauthorized AI personality cloning that isn’t strictly commercial.

B. The European Union: Dignity-Centered & Guarded

The EU places human dignity and informational self-determination at the centre of its laws. Supported by the EU AI Act, the European approach demands transparency, but it still lacks a targeted, statutory blueprint for post-mortem AI avatars.

C. India: The Emerging Hybrid

India is in a transitional phase. The Supreme Court’s historic ruling in Justice K.S. Pettaway v. Union of India declared informational privacy an unalienable fundamental right under Article 21 of the Constitution. While the new DPDP Act, 2023 sets up strict rules for processing personal data, it does not explicitly outline guidelines for the digital remains of the deceased or AI replicas.

RESEARCH METHODOLOGY

Introduction to the Research Methodology

The rise of AI, machine learning, and digital resurrection has broken the traditional boundaries of personality and privacy laws. Unlike simple disputes over physical inheritance, post-mortem digital identity spans constitutional law, IT regulations, data protection, succession law, AI governance, and commercial ethics.

Therefore, a multidimensional research methodology is required.

This study utilizes a qualitative doctrinal, comparative, analytical, and normative legal research methodology. It systematically interprets legal texts, judicial precedents, constitutional principles, and international instruments to evaluate current regulatory gaps and formulate a harmonized legal framework.

Nature and Approach of the Research

The study is intentionally designed across five dimensions:

• Descriptive: Defines concepts like digital remains, post-mortem privacy, voice cloning, and AI resurrection.
• Analytical: Evaluates constitutional principles, statutory provisions, and corporate policies to see if they genuinely protect human dignity
• Comparative: Juxtaposes the legal philosophies of India, the United States, and the European Union.
• Exploratory: Examines emerging legal questions regarding generative AI that remain unresolved by current statutes.
• Normative: Proposes legal reforms to balance corporate innovation with fundamental human rights.

The study follows an inductive research approach, analysing existing laws, judicial decisions, and tech trends to build broader normative conclusions for future legislative reform.

Sources of Data

The primary legal sources analysed in this study include:

International & EU Instruments

├── General Data Protection Regulation (GDPR)

├── European Union AI Act (2024)

├── Charter of Fundamental Rights of the EU

└── UNESCO Recommendation on the Ethics of AI

United States Framework

├── California Civil Code §3344.1

├── RUFADAA

└── California Assembly Bills AB 1836 & AB 2602

India Framework

├── Constitution of India

├── Digital Personal Data Protection (DPDP) Act, 2023

├── Draft DPDP Rules, 2025

├── Information Technology Act, 2000

└── Indian Succession Act, 1925

RECENT DEVELOPMENTS IN AI REGULATION

European Union AI Act (2024)

The EU AI Act represents the world’s first comprehensive, risk-based AI law. It categorizes AI systems by risk level and places strict transparency obligations on developers. While it does not explicitly manage post-mortem rights, its strict mandates on transparency, accountability, and synthetic media provide a solid legal foundation to prevent deceptive, unauthorized AI replicas of the deceased.

California Digital Replica Laws (AB 1836 and AB 2602)

Enacted in 2024, California’s Assembly Bills AB 1836 and AB 2602 directly target unauthorized AI-generated digital replicas. These statutes ban the commercial exploitation of digitally recreated performances without explicit consent, strengthening legal shields for performers against voice cloning and facial replication.

India’s Digital Personal Data Protection Framework

India’s DPDP Act, 2023, establishes a strict consent-based framework for processing data. The Draft DPDP Rules, 2025, expand on this by clarifying the transparency and accountability duties of Data Fiduciaries. However, neither framework explicitly addresses digital remains or AI resurrection, leaving a massive grey area regarding who owns and controls a deceased person’s digital ghost.

COMPARATIVE JURISDICTIONAL ANALYSIS

The United States: Property-Centric Commercialization

The U.S. framework treats identity primarily as a commercial property asset. While constitutional privacy protections are implied within the Bill of Rights (Griswold v. Connecticut; Roe v. Wade) and surveillance limits are drawn by the Fourth Amendment (Katz v. United States; Carpenter v. United States), these protections abruptly end at death. Post-mortem rights are left to a messy patchwork of state laws and sector-specific privacy regulations like

HIPAA. Without a sweeping federal data privacy law like the proposed American Data Privacy Protection Act (ADPPA), the U.S. defaults to a market-driven model. This allows wealthy estates to monetize identities but leaves ordinary citizens completely exposed to corporate data scraping.

The European Union: The Dignity-Centric Fundamental Rights Model

Conversely, the EU views privacy and data protection as inalienable human rights. Article 7 of the Charter of Fundamental Rights of the E.U. protects private and family life, while Article 8 establishes an independent right to personal data protection. Grounded in the historical right to informational self-determination (Volkszählungsurteil),

European law treats personal data as an extension of the human spirit rather than a simple commodity. Although the GDPR explicitly states in Recital 27 that it does not apply to the data of deceased persons, it gives EU member states the freedom to pass localized protections, such as France’s Digital Republic Act. Furthermore, in non-EU states like the UK, the Human Rights Act 1998 expands the concept of “private life” to protect personal identity and psychological integrity (Goodwin v. United Kingdom), preventing corporations from arbitrarily exploiting sensitive post-mortem records.

India: The Evolving Fundamental Rights Framework

India’s approach to data privacy has undergone a massive paradigm shift, evolving from a conservative common law model (M.P. Sharma v. Satish Chandra; Kharak Singh v. State of U.P.) to an expansive fundamental right. In the landmark Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) ruling, a nine-judge bench held that privacy is a core component of Article 21 (Right to Life and Personal Liberty), encompassing informational privacy and control over personal data.

To codify this mandate, the Parliament passed the DPDP Act, 2023. Section 14 of the Act introduces a unique mechanism allowing a “Data Principal” to designate a nominee to exercise access, correction, erasure, and grievance redressal rights in the event of their death or incapacity. The 2025 Rules enforce this by requiring tech platforms (“Data Fiduciaries”) to provide accessible nomination tools. Despite these historic steps, critics highlight severe structural gaps: the DPDP Act provides wide exemptions for government surveillance and completely lacks clear guardrails against automated decision-making or AI-driven cross-border data transfers.

Jurisdictional Comparison Matrix

5. The Solution: A Unified Digital Afterlife Framework

To patch these regulatory holes, this article proposes a Unified Digital Afterlife Framework built on six foundational pillars:

The Six Pillars

1. Individual Digital Autonomy: Legally binding Digital Wills must be recognized, allowing citizens to state exactly what happens to their data profile after death.
2. Digital Executors: The law must recognize specialized digital executors who have the legal authority to manage complex online accounts, cloud storage, and cryptographic keys.
3. Consent and Transparency: Building an AI clone requires absolute, explicit, opt-in consent given during an individual’s lifetime. If an AI replica is deployed, it must feature unmistakable transparency labels declaring it as synthetic media.
4. Platform Accountability: Big Tech companies must provide easy-to-use digital legacy tools, honour verified digital wills, and actively block unauthorized AI reconstructions on their networks.
5. Limited Commercial Exploitation: Estates should have a reasonable, time-limited window to benefit from or protect a likeness. Once that window closes, public interest exceptions should allow for educational, artistic, and historical use.
6. International Harmonization: Because data lives in the cloud across borders, international bodies must collaborate to establish minimum global legal standards for digital assets and AI resurrection.

LIMITATIONS OF THE STUDY

• Doctrinal Focus: The study relies primarily on statutes, judicial decisions, and academic literature rather than empirical field data or direct interviews with affected families and policymakers.
• Rapid Technological Pace: ** AI technologies evolve at a breakneck pace, meaning legislative responses may change rapidly after the publication of this research.
• Jurisdictional Scope: The study focuses heavily on India, the US, and the EU, leaving out alternative legal approaches seen in nations like Japan, China, or South Korea.
• Limited AI Precedents: Direct judicial precedents dealing specifically with AI-generated clones of the deceased remain rare, requiring reliance on analogous privacy and IP laws.

6. Conclusion

Generative AI has turned our digital memories from passive histories into dynamic, magnetisable, and interactive resources. While current frameworks in the US, EU, and India offer bits and pieces of protection, their separation leaves both families and tech companies stranded in uncertainty. By treating post-mortem digital identity as its own independent legal right, we can pave a path that welcomes technological innovation while fiercely safeguarding human dignity, memory, and personal choice long after we are gone.

Preliminary Bibliography (OSCOLA Style)

Cases & Legislation

• Justice K S Puttaswamy (Retd) v Union of India (2017) 10 SCC 1.
• California Civil Code § 3344.1.
• Digital Personal Data Protection Act 2023 (India).
• Regulation (EU) 2016/679 (General Data Protection Regulation).
• Regulation (EU) 2024/1689 (Artificial Intelligence Act).
• Revised Uniform Fiduciary Access to Digital Assets Act (2015).

Books & Articles

• Allen AL, Unpopular Privacy: What Must We Hide? (Oxford University Press 2011).
• Harbinja E, Post-Mortem Privacy 2.0: Theory, Law and Technology (Edinburgh University Press 2024).
• Madow M, ‘Private Ownership of Public Image: Popular Culture and Publicity Rights’ (1993) 81 California Law Review 127.
• Nimmer MB, ‘The Right of Publicity’ (1954) 19 Law and Contemporary Problems 203.
• UNESCO, Recommendation on the Ethics of Artificial Intelligence (2021).