New Jersey’s Revised Uniform Fiduciary Access to Digital Assets Act
The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) was enacted in New Jersey to provide clarity and structure for fiduciaries seeking access to a decedent’s or incapacitated person’s digital assets. The law balances the privacy expectations of individuals with the practical needs of estate and trust administration.
Key Definitions
- Digital Asset: An electronic record in which an individual has a right or interest, such as email accounts, social media profiles, cryptocurrency, or cloud-stored files.
- Fiduciary: A person authorized to act on behalf of another, including:
- Executor or administrator of an estate
- Agent under a power of attorney
- Trustee
- Court-appointed guardian
- Custodian: A person or business that stores digital assets (e.g., Google, Meta, Apple).
Fiduciary Access Categories
RUFADAA applies to four types of fiduciaries:
- Personal Representatives (Executors/Administrators) – May access the digital assets of a deceased individual.
- Agents under a Power of Attorney – May manage digital assets during the principal’s lifetime, if specifically authorized.
- Trustees – May access digital assets titled in the name of the trust.
- Court-Appointed Guardians – May access digital assets with court approval.
Hierarchy of Access Authorization
RUFADAA establishes a three-tiered system to determine fiduciary authority:
1. Online Tools
If the digital service provider (such as Google or Facebook) offers a tool for account holders to direct post-death access (e.g., Google’s Inactive Account Manager or Facebook’s Legacy Contact), that direction overrides any conflicting instructions in a will, trust, or power of attorney.
2. Legal Documents
If no online tool exists or is used, instructions provided in estate planning documents control. These documents must specifically authorize access to digital assets; general powers are not sufficient.
3. Terms of Service Agreements (TOSAs)
If neither an online tool nor legal documents address the issue, the service provider’s Terms of Service Agreement governs access. Most TOSAs restrict access to authorized users only.
Scope of Access
Fiduciaries may seek access to:
- Content: The actual substance of communications (e.g., emails, messages), which requires explicit authorization.
- Catalog Information: Metadata such as sender, recipient, and timestamps, which may be accessible with broader authority.
Service providers may limit access to catalog information if content access is not authorized.
Steps for Fiduciaries to Request Access
Fiduciaries must usually provide the custodian with:
- A written request for access;
- A certified copy of the death certificate (for estates);
- Documentation of fiduciary authority (e.g., letters testamentary, power of attorney, or court order); and
- A copy of the will, trust, or other document granting digital access rights.
In some cases, custodians may require a court order to release certain information.
Custodian Protections
- Custodians are not liable for acts done in good faith under RUFADAA.
- They are permitted to request additional documentation or a court order.
- Custodians may limit access to specific portions of data or provide it in alternative formats.
User Privacy and Federal Law Compliance
- If the account holder prohibited disclosure via legal documents or online tools, fiduciaries cannot override that instruction.
- RUFADAA does not override federal privacy laws, such as the Stored Communications Act or the Computer Fraud and Abuse Act.
Practical Takeaways for New Jersey Residents
- Estate planning documents should expressly authorize access to digital assets.
- Individuals should consider using online tools offered by service providers to designate account access.
- To avoid confusion and uncertainty, make sure there is no conflict between estate planning documents and online tools offered by service providers
- Appointing a digital executor or agent can help ensure smooth management of online accounts.
- Without proper planning, loved ones may be unable to access essential financial or personal information stored digitally.