• via Alberto da Giussano, 26, 20145 Milano
  • +39 02 8295 4969
  • info@studiolegalebianucci.it
Avv. Marco Bianucci
Avv. Marco Bianucci

Matrimonial Lawyer

Managing your digital inheritance in a will means deciding what will happen to cloud photographs, email accounts, social media profiles, websites, domains, archives, subscriptions, and, in some cases, crypto-assets. The question is not only about who will receive an asset: it also concerns who will be able to retrieve useful documents, which contents remain confidential, and how to prevent essential information from being lost.

Accounts, data, and assets do not always coincide. A personal profile may contain memories, private communications, and data belonging to other persons; a domain or a digital wallet, on the other hand, may have an economic value. I want to help you distinguish between these levels, understand what can be disposed of in a will, and why access instructions require separate and careful organization.

What actually falls within digital inheritance

The first step is to separate the content from the account. A photograph stored online, a claim against a platform, a domain name, or a crypto-asset may have an economic or personal relevance distinct from the relationship with the service provider. Simply writing that you wish to leave "all accounts" does not clarify whether you intend to transfer value, preserve certain files, or close a profile.

It is helpful to distinguish economically relevant assets and rights, such as a revenue-generating website, a domain, an archive used for a business, digital credits, or crypto-assets. Alongside these, there are predominantly personal contents: photographs, documents, diaries, emails, messages, and copies of cloud archives. Finally, there are access tools, such as devices, passwords, recovery codes, and two-factor authentication systems.

Each group raises a different question. For an economically relevant asset, it is necessary to identify precisely what is intended to be allocated and to whom. For personal photographs and documents, it matters whether they should be preserved, extracted, or deleted. For credentials, the issue is not succession in the strict sense, but security: whoever knows them can immediately enter spaces that also contain data extraneous to the estate.

The will disposes of assets, it does not automatically hand over every account

The will can attribute transmissible assets and rights. Article 587 of the Italian Civil Code places testamentary provisions concerning the time after death at the center of testamentary succession. For digital relationships, this allows indicating, for example, the recipient of a domain, a website, an online credit, or an archive of economic relevance, provided the object is identifiable. The current text of the Civil Code on testamentary successions also includes rules on the form of the will and the protection of forced heirs.

An effective provision does not require transcribing technical details into the will, but it must make clear which right or asset is intended to be assigned. Saying "my website" may be insufficient if there are a website, a domain, hosting, a content archive, and various connected services. It is more useful to identify the asset with stable elements, explaining its function and distinguishing it from any personal accounts used solely to access services.

The relationship with the platform remains an autonomous profile. A will can express intentions regarding the fate of an asset or content, but it does not automatically turn an heir into the original holder of a personal profile. The terms of service, the type of relationship, and the presence of third-party data affect how the provider can supply documents, export content, close an account, or handle requests from entitled persons.

Reserved shares and the form of the will

Digital assets form part of the estate if they have transmissible value. They do not constitute an area separate from ordinary succession. If there are forced heirs, namely those persons to whom the law reserves a portion of the inheritance, the disposition of a digital wallet, a productive domain, or other economically relevant rights must be considered alongside real estate, accounts, debts, and other allocations.

The civil code identifies the spouse, children, and, in the absence of children, ascendants among the forced heirs. The allocation of a digital asset does not eliminate the reserved share. You can assign a specific asset to a person, but its value and effects must be coordinated with the entire hereditary estate. The mistake to avoid is treating an asset kept online as if it had no consequences in the overall distribution.

The form of the will remains decisive. For a holographic will, Article 602 of the civil code requires the document to be written entirely in the testator's own hand, dated, and signed. A note typed on a phone, a file stored in the cloud, or an email can help organize thoughts, but they do not satisfy the requirement of handwritten writing. Supporting digital information must therefore not be confused with the testamentary act.

Personal data after death: access, confidentiality, and limits

Privacy does not end with the opening of succession. Recital 27 of the GDPR clarifies that the European regulation does not directly apply to the personal data of deceased persons and leaves member states the possibility of providing national rules. The text of EU Regulation 2016/679 must therefore be read together with Italian regulations.

Article 2-terdecies of the Privacy Code allows the exercise of the rights provided for by Articles 15-22 of the GDPR regarding the data of a deceased person by anyone acting for their own interest, for the protection of the data subject acting as an agent, or for family reasons deserving of protection. The Code regarding the protection of personal data thus links the request to a concrete interest or reason, not to general curiosity.

Access is not equivalent to an unlimited power of reading. A request may be necessary to obtain documents useful for succession, reconstruct an economic relationship, or recover identified content. It is quite another thing to claim the right to indiscriminately consult messages, conversations, and data involving other people. The purpose of the request, the nature of the content, and the protection of third parties change the practical outcome.

The interested person may prohibit the exercise of such rights, limited to information society services offered directly, by means of a written statement communicated to the data controller. The prohibition must be specific and unequivocal. Furthermore, it cannot damage patrimonial rights deriving from death nor prevent third parties from defending their interests in court. Therefore, a desire for confidentiality does not necessarily coincide with the impossibility of obtaining an indispensable document to assert a hereditary right.

Why passwords and keys should not be included in the will

Credentials are not a simple description of the estate. Passwords, PINs, recovery codes, and private keys allow immediate entry into services that may contain payments, conversations, documents, health data, or identification tools. Including them in the will exposes this information to wider circulation precisely at the moment when confidentiality must be protected.

The most orderly solution separates testamentary intent from operational information. In the will, you can identify the recipient of an asset or the desired purpose, such as preserving photographs or closing a profile. In a separate document, kept securely and updateable, the existence of accounts, necessary devices, recovery channels, and the location where credentials can be found can instead be indicated.

An inventory must also explain what each access is for. For each digital relationship, it can be useful to note whether there is an economic value, whether there are renewals or periodic payments, which email address is associated, and what result is to be achieved. The same credential can in fact open a private inbox, a professional archive, and connected services: providing a password without indicating boundaries and purposes can create more problems than it solves.

Crypto-assets, domains, and archives: the differences that matter

Crypto-assets require distinguishing between legal right and technical control. If the holder directly keeps the private keys of a non-custodial wallet, the testamentary disposition can indicate the beneficiary but does not replace the information necessary to carry out transactions. The loss of the recovery phrase can make the asset technically unreachable, even if its legal destination has been expressed clearly.

If digital assets are instead managed by an intermediary or a platform, the provider's relationship and procedure also matter. In this situation, it is necessary to distinguish the successional allocation from the path to document the status of heir or entitled person and to obtain the permitted information. Knowing a password does not, by itself, replace the steps required by the contractual relationship.

An internet domain and a website pose a different problem. It is necessary to identify what produces value or requires continuity. The domain, registration service, hosting, content, and email address used for renewals may be separate relationships. If the activity is to continue, the instructions must make these elements recognizable without granting whoever receives the asset indiscriminate access to the owner's private correspondence.

How to order instructions without confusing plans

Clear planning starts with an essential inventory. There is no need to pour every technical detail into the will. What is needed is to know which digital relationships exist, which have patrimonial value, which contain only personal materials, and which depend on devices or essential recovery systems. The inventory must be capable of being updated when a platform, a password, or a device changes.

You can then distinguish at least two objectives. The first is to allocate an economic value. Here, the will must make the asset and its recipient recognizable, taking into account the rest of the succession. The second is to indicate how to manage content and personal memory: preserve a photographic collection, extract specific documents, close a profile, or limit the use of confidential materials.

Precision avoids contradictory instructions. Asking for the deletion of an account while at the same time leaving photographs or documents stored inside it to a person can create an operational conflict. It is necessary to clarify whether a copy of certain contents must be requested first and only then closure, without assuming that the provider automatically transfers every material or allows complete access to the profile.

Frequently asked questions

Can I leave a social media account in my will?

You can indicate what result you desire. For example, you can ask for the profile to be closed or for specific contents to be preserved. This does not automatically entail the transfer of the personal account to an heir: the relationship with the provider, the terms of service, and the data of other persons present in communications also play a role.

Does a file saved on the phone count as a will?

No, by itself it does not replace a testamentary form provided by law. A holographic will must be written entirely by hand, dated, and signed by the testator. A digital file can serve as a reminder to organize accounts and instructions, but it does not meet the requirement of handwriting demanded by Article 602 of the civil code.

Can heirs request the deceased's data?

They can do so when an interest provided by law arises. Article 2-terdecies of the Privacy Code considers one's own interest, the protection of the data subject through an agent, and family reasons deserving of protection. The request does not grant a general right to read every message: purpose, requested content, and third-party rights remain decisive elements.

Can I prohibit access to my data after death?

You can express a prohibition under the conditions set by privacy regulations. For information society services offered directly, the prohibition requires a written statement communicated to the data controller and must be specific, free, informed, and unequivocal. However, it cannot damage patrimonial rights deriving from death or the defense in court of other people's interests.

Do crypto-assets pass to heirs if the private key is missing?

Succession does not automatically resolve the loss of keys. The will can identify the recipient of the asset, but a non-custodial wallet also requires technical information to access it. It is therefore necessary to provide a separate and secure system to make keys or recovery phrases retrievable, without inserting them into the will.

Before setting your testamentary intent

The useful rule is to distinguish before writing. Digital assets with economic value, personal contents, third-party data, and credentials do not require the same response. The will serves to express patrimonial dispositions and clear indications on the destination of contents; a separate archive serves to make relationships, devices, and procedures traceable without exposing confidential information.

When the digital estate is substantial or intertwines with reserved shares, online activities, and private data, a coordinated formulation prevents an understandable will from remaining difficult to implement. To set up this distinction in relation to your succession, you can contact me.