RUFADAA Explained: The Law That Controls Your Family's Digital Assets

If your parent dies tomorrow, can you legally access their email? Their cloud storage? Their bank account's online portal?

The answer depends on a law most families have never heard of: the Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA. It's been adopted in some form by nearly every US state, and it fundamentally controls who gets access to digital accounts after someone dies or becomes incapacitated.

Understanding RUFADAA doesn't require a law degree. It comes down to one concept: a three-tier hierarchy that determines who wins when family members, legal documents, and tech companies disagree.

What RUFADAA does

Before RUFADAA, there was no clear law governing digital asset access after death. Families were at the mercy of each platform's terms of service — and those terms almost always defaulted to "no access." Even executors with a court-issued letter testamentary were routinely denied access to a deceased person's email, social media, and cloud storage.

RUFADAA created a legal framework that gives fiduciaries (executors, trustees, agents under power of attorney, guardians) the right to manage digital assets. But it doesn't give them unlimited access. Instead, it establishes a priority system.

The three-tier hierarchy

This is the core of RUFADAA, and it's the part that surprises most families.

Tier 1: Platform tools (highest priority)

Instructions set through a platform's own tool take top priority. If your parent used Google's Inactive Account Manager to designate you as a trusted contact, that instruction overrides everything else — including what's in the will.

Examples of platform tools covered by Tier 1:

• Google Inactive Account Manager
• Apple Legacy Contact
• Facebook Legacy Contact

This is why setting up these platform tools is so important. They're not just convenient — they're legally authoritative. Under RUFADAA, a platform tool instruction beats a will.

Tier 2: Legal documents (second priority)

If no platform tool was configured, RUFADAA looks at the person's legal documents: will, trust, or power of attorney. If these documents include specific language granting the executor authority over digital assets, the platform is legally obligated to comply.

The key word is "specific." A generic will that says "I leave all my property to my spouse" may not be enough. RUFADAA works best when the will explicitly mentions digital assets, digital accounts, and the authority to access them.

This is why estate planning attorneys increasingly recommend including a digital assets clause in wills and powers of attorney. Without it, you're relying on Tier 3.

Tier 3: Terms of service (lowest priority)

If there's no platform tool and no specific legal instruction, the platform's terms of service apply. This is where things get difficult for families, because most terms of service default to privacy protection — which means blocking access.

Under Tier 3, the platform can (and usually will) refuse to grant access to the deceased person's account. They may delete the account after inactivity. They're under no legal obligation to share content, messages, or data with the family.

Most families end up in Tier 3 because they didn't know about platform tools and their will doesn't mention digital assets. This is the scenario that leads to months of legal battles, court orders, and lost data.

What RUFADAA covers

RUFADAA applies to most types of digital assets:

• Email and electronic communications — though access to the content of communications (the actual messages) requires specific authorization, not just general executor authority
• Social media accounts
• Cloud storage and files
• Financial accounts accessed online
• Domain names and websites
• Cryptocurrency (to the extent it's held in accounts governed by a service provider)

There's an important nuance around email and messaging: RUFADAA distinguishes between a "catalogue" of communications (who sent what, when) and the actual content. An executor may be able to get the catalogue without specific authorization, but reading the actual emails usually requires the deceased to have explicitly granted that access — either through a platform tool or specific legal language.

Which states have adopted RUFADAA

As of 2026, the vast majority of US states have adopted some version of RUFADAA. The Uniform Law Commission maintains the official list. A few states have modified the uniform version, and specific provisions may vary.

Even in states that haven't adopted RUFADAA, the principles are increasingly followed by courts and platforms as the de facto standard. If your parent lives in a state without RUFADAA, the same practical advice applies: set up platform tools and include digital asset language in legal documents.

What RUFADAA doesn't solve

RUFADAA provides the legal authority to access digital assets, but it doesn't provide the means. Having legal authority doesn't give you the password. It doesn't unlock the phone. It doesn't bypass two-factor authentication.

In practice, even with RUFADAA authority, getting access to a specific account can require:

• Submitting a death certificate and letters testamentary to the platform
• Waiting weeks or months for the platform to process the request
• Navigating each platform's unique procedures (Google is different from Apple is different from Facebook)
• Potentially filing a court order for platforms that resist

This is why the practical preparation — building an account inventory, managing passwords within the family, and setting up platform tools — matters as much as the legal authority. RUFADAA is the legal backstop. The planning is what actually gets your family access.

What this means for your family

The practical implications are straightforward:

1. Set up platform tools now. They sit at the top of RUFADAA's hierarchy. They're free. They take minutes. And they guarantee access through the platform's own process — no lawyers, no court orders, no months of waiting.

2. Update the will. If your parent's will doesn't mention digital assets, it should. A simple clause granting the executor authority to access, manage, and close digital accounts is sufficient. An estate planning attorney can add this language for a modest fee.

3. Create an account inventory. Legal authority is useless if no one knows which accounts exist. A comprehensive digital estate plan documents every account, credential, and instruction in one place.

4. Appoint a digital executor. This can be the same person as the estate executor, or a different family member who's more tech-savvy. Either way, naming someone explicitly gives them the strongest possible position under RUFADAA.

Getting organized

If you're helping your parents plan for their digital estate, the Digital Legacy Kit covers every step: building the account inventory, configuring platform legacy tools, drafting a digital asset memorandum, and appointing a digital executor. It's designed for families who want to get this done in a weekend, not spend months navigating legal complexity.