Post-Mortem Digital Identity: Legal Framework 2026
⚖️ AI Law · Digital Likeness
Post-Mortem Digital Identity: Legal Framework 2026
Who owns a person’s digital persona after death — their AI avatar, voice clone, social media presence, and likeness? The law is fragmented, the technology is ahead of the regulation, and the commercial stakes are rising fast.
📋 5 sections · ~7 min read
🇪🇺 EU · 🇬🇧 UK · 🇺🇸 US
Updated April 2026
📋 In This Guide
5 sections · ~7 min read
1
What counts as post-mortem digital identity
AI avatars, voice clones, social media, data — the full scope
2
Who owns it after death — the legal framework
Personality rights, IP, data protection — three separate regimes
3
Jurisdiction comparison: EU, UK, US
How the rules differ and where they conflict
4
Commercial use of post-mortem digital identity
AI resurrection, licensing, estate rights, and enforcement
5
How to protect it: planning and documentation
What individuals and businesses should do now
🔍 Section 1
What Counts as Post-Mortem Digital Identity
A person’s digital identity does not end at death — it fragments across multiple legal categories, each governed by different rules. Before asking who owns it, you need to identify what “it” is. The categories overlap, but the legal treatment of each is distinct.
🤖
AI avatars and voice clones
Highest commercial value, least legal clarity
Synthetic reproductions of a person’s face, voice, movement, or personality — trained on or derived from their real likeness. These include deepfake avatars, voice synthesis models, and AI chatbots trained to replicate how a person communicated. Commercially the most valuable category; legally the most contested. No jurisdiction has a complete statutory framework for post-mortem AI likeness rights.
📱
Social media accounts and content
Platform terms govern, not inheritance law
Posts, photos, videos, follower relationships, and monetisation arrangements on Instagram, YouTube, TikTok, X, and LinkedIn. These are subject to platform terms of service — which typically prohibit transfer by will and give the platform significant discretion over what happens to accounts after death. The content may have copyright, but the account relationship usually does not.
📊
Personal data and biometric records
GDPR does not apply post-mortem — gap in EU law
Biometric data, health records, financial data, location history, and behavioural profiles held by platforms, employers, healthcare providers, and governments. GDPR explicitly does not cover deceased persons — member states may extend protections, but the EU has not harmonised this. The gap creates significant uncertainty for AI training on post-mortem data.
ℹ️
Why the distinction matters
Each category is governed by different legal regimes — personality rights, copyright, data protection, and contract law — which may apply simultaneously and give different answers to the same question. A company using a deceased celebrity’s AI avatar may be compliant with data protection law, in breach of personality rights, and infringing copyright all at once.
⚖️ Section 2
Who Owns It After Death: The Legal Framework
Three separate legal regimes govern post-mortem digital identity — and they reach different conclusions about ownership, duration, and who can enforce rights. Understanding which regime applies to which asset is the starting point for any legal analysis.
Three legal regimes — three different answers
Applies simultaneously
1
Personality rights (right of publicity) Governs likeness and voice
Personality rights protect the commercial exploitation of a person’s name, likeness, and voice. Post-mortem survival of these rights varies enormously by jurisdiction: in California (where most US entertainment industry activity is concentrated), the right of publicity survives death for 70 years and is descendible as property. In the UK, there is no equivalent statutory right — personality is not property. Germany provides strong post-mortem personality protection. Most EU member states are in between.
Key implication: For AI avatar products using a deceased celebrity’s likeness, the applicable law is typically the law of the jurisdiction where the person was domiciled at death — not where the AI company is incorporated. A US-domiciled celebrity’s estate can bring California right of publicity claims against an EU-incorporated AI company.
2
Copyright Governs creative works
Copyright in a deceased person’s creative works — writings, recordings, performances, photographs — passes to their estate and lasts 70 years post-mortem under the Berne Convention in most jurisdictions. This is the most clearly defined post-mortem right. An AI model trained on a deceased artist’s published works without licence may infringe copyright owned by the estate. The estate can license those works, bring infringement claims, and control derivative works.
Key implication: Training an AI voice clone on a deceased musician’s recordings without an estate licence is copyright infringement — regardless of whether the output sounds identical. The training act itself infringes, not just the output.
3
Data protection law Governs personal data
GDPR explicitly does not apply to deceased persons — it covers only living natural persons. However, some EU member states have extended GDPR-like protections to deceased individuals: France allows data subjects to give instructions about their data for after death; Italy provides limited post-mortem data rights. The UK GDPR follows the same position as GDPR. The result is a patchwork: personal data of a deceased person may be unprotected by data law but still protected by copyright or personality rights.
Key implication: A company training AI on a deceased person’s biometric data faces no GDPR claim — but may still face copyright claims (if the data includes creative works), personality rights claims (if the data includes likeness), and breach of contract claims (if the data was obtained under terms restricting use).
🌍 Section 3
Jurisdiction Comparison: EU, UK, and US
Post-mortem digital identity rights vary significantly across the major jurisdictions. For businesses operating internationally — particularly AI companies building products using historical likeness data — the differences create genuine compliance complexity.
Factor
🇺🇸 United States
🇬🇧 United Kingdom
🇪🇺 European Union
Post-mortem personality rights
Strong (state-level): California 70 years, Texas 50 years, NY 40 years
None statutory — limited common law privacy protection only
Variable by member state — Germany strong, France moderate, others weak
Copyright post-mortem
Life + 70 years, passes to estate
Life + 70 years, passes to estate
Life + 70 years, harmonised under Berne
GDPR / data protection
No federal equivalent — state laws vary
UK GDPR does not apply post-mortem
GDPR does not apply — member state extensions vary
AI avatar / voice clone law
California AB 1836 (2025): estate consent required for digital replicas of deceased performers
No specific legislation — common law and copyright only
AI Act covers high-risk systems; no harmonised digital likeness law
Social media inheritance
Platform terms govern — most allow legacy contacts or memorialisation
Platform terms govern — no statutory right to inherit accounts
Platform terms govern — DSA does not address post-mortem account rights
⚠️
California AB 1836 — effective January 2025
California’s AB 1836 requires explicit consent from the estate before using a deceased performer’s digital replica in an audiovisual work. This applies to AI-generated voice clones and video avatars. Violations expose the defendant to actual damages plus profits attributable to the use. For any company using deceased performers’ likenesses in AI content targeting US audiences, this is the most immediate legal risk.
💼 Section 4
Commercial Use of Post-Mortem Digital Identity
The commercial market for post-mortem digital identity is real and growing. AI resurrection services, virtual concert technology, brand endorsements using historical likeness, and AI companions trained on deceased persons’ communications are all active commercial categories. Each carries distinct legal exposure.
Legal exposure checklist for commercial post-mortem likeness use
Before going live
📋
Identify the applicable jurisdiction for personality rights
Determine where the deceased person was domiciled at death — that jurisdiction’s personality rights law governs, regardless of where your company is incorporated or where the AI model is hosted. For US persons, identify which state (California, Texas, New York all have different rules). For EU persons, identify the member state.
Step 1 — before any other analysis
🤝
Obtain estate consent — and document it correctly
For any jurisdiction with post-mortem personality rights (California, Germany, and others), obtain written consent from the estate — specifically from whoever holds the personality rights, which may be different from the copyright beneficiary. The consent must specify: scope of use, territories, duration, permitted modifications, and revenue sharing. A vague estate “approval” is not sufficient for commercial deployment.
Vague estate approval is not sufficient
🎵
Clear the copyright separately from personality rights
Estate consent for personality rights does not automatically clear copyright. If you are training an AI model on a deceased musician’s recordings, you need a copyright licence from the copyright owner — which may be the estate, a record label, a publisher, or a combination. The same applies to a deceased author’s writings, an actor’s filmed performances, or an athlete’s image rights held by their former employer. Separate rights require separate clearance.
Personality rights ≠ copyright licence
🔍
Assess EU AI Act obligations for the output system
Under the EU AI Act, AI systems that generate synthetic representations of real persons must include disclosure obligations — the AI Act’s transparency requirements apply to deepfakes and AI-generated content involving real individuals. For post-mortem digital identity products deployed in the EU, this means disclosure that the content is AI-generated is mandatory from August 2026, regardless of whether the deceased person’s estate has consented. The consent and the disclosure are separate obligations.
EU AI Act disclosure — mandatory from August 2026
🛡️ Section 5
How to Protect It: Planning and Documentation
Post-mortem digital identity protection requires action before death — not after. The legal tools available to estates are significantly weaker than the tools available to the person themselves. For individuals with commercial digital identity value, and for businesses that depend on someone’s digital persona, planning is the only reliable protection.
👤
For individuals
Document your wishes before they are needed
The most valuable action any person with commercial digital identity can take is to document, in writing, what may and may not be done with their likeness, voice, and persona after death — and appoint a specific person to manage it. Without explicit instructions, estates often lack the expertise or legal standing to enforce rights effectively.
✓Digital legacy instructions in your will — explicit permissions and prohibitions
✓Appoint a digital executor with specific authority over digital assets
✓Register any existing personality rights (where registration systems exist)
✓Platform legacy settings — Google Inactive Account Manager, Facebook Memorialisation
🏢
For businesses
Build rights clearance into product development
For any business building AI products that use historical likeness data — including training datasets containing public figures, entertainment archive material, or user-generated content — rights clearance is a product development step, not a legal afterthought. The time to identify and clear rights is before the model is trained, not before launch.
✓Training data audit — identify all post-mortem likeness data before training
✓Jurisdiction mapping — identify applicable personality rights laws per individual
✓Estate clearance documentation for any named individual’s likeness used commercially
✓EU AI Act disclosure obligations embedded in product UX from August 2026
⚖️
For estates
Act before unauthorised use becomes established
Estates managing significant digital identity assets — whether a deceased entertainer, athlete, or business figure — face a monitoring and enforcement challenge that requires active management. Unauthorised use of AI-generated likeness is difficult to detect and moves faster than traditional rights enforcement. Early intervention is significantly easier than retrospective takedown.
✓Establish monitoring for unauthorised digital likeness use (Google Alerts, image search, AI content detection)
✓Register rights in jurisdictions that have registration systems (California, some EU states)
✓Send cease and desist letters promptly — delay weakens enforcement position
💡
The key principle
Post-mortem digital identity law is fragmented, fast-changing, and jurisdiction-dependent. The businesses and estates that navigate it successfully are those that treat it as a structured legal compliance problem — not a reputational or ethical one. The legal exposure from unauthorised use of post-mortem digital identity is real, quantified, and increasingly enforced. For AI companies, content platforms, and entertainment businesses, the question is not whether to have a post-mortem likeness policy — it is whether your policy is documented, jurisdiction-specific, and defensible.
Legal Advice on Post-Mortem Digital Identity
WCR Legal advises AI companies, entertainment businesses, and estates on digital likeness rights, post-mortem personality rights, EU AI Act compliance, and rights clearance for AI training datasets. We provide jurisdiction-specific advice — not generic frameworks.
No commitment required · Confidential initial consultation · Response within 1 business day
Frequently Asked Questions
It depends on the jurisdiction where the deceased person was domiciled. In California, an estate has the right to control commercial use of a deceased person’s digital likeness for 70 years — and AB 1836 (effective January 2025) specifically covers AI-generated digital replicas. In the UK, there is no equivalent statutory right, so the estate would need to rely on copyright or passing off. In Germany, post-mortem personality rights provide strong protection. The strength of the estate’s position depends entirely on which jurisdiction’s law applies.
GDPR explicitly does not apply to deceased persons — it covers only living natural persons. However, some EU member states have extended protections: France allows individuals to give instructions about their data for after death; Italy provides limited post-mortem rights. The result is a patchwork with no EU-level harmonisation. The data protection gap means that post-mortem personal data may be freely processed for AI training unless other legal bases apply — such as copyright in creative works or personality rights in likeness.
The EU AI Act requires that AI-generated or manipulated content depicting real persons — including deceased persons — must be disclosed as AI-generated. This transparency obligation applies from August 2026 for high-risk AI systems and to general-purpose AI models deployed in the EU. The disclosure obligation applies regardless of whether the deceased person’s estate has consented to the use. Estate consent and AI Act disclosure are separate and cumulative requirements.
Fame does not reduce your legal exposure — it increases it. High-profile deceased persons have more valuable estates with more resources to enforce rights and more motivation to do so. For commercial AI products, public figure status is irrelevant to the legal analysis: if the applicable jurisdiction has post-mortem personality rights, fame does not create a public figure exception. The correct approach is to identify the applicable jurisdiction, assess whether personality rights survive death there, and obtain estate consent if required before any commercial deployment.
Oleg Prosin is the Managing Partner at WCR Legal, focusing on international business structuring, regulatory frameworks for FinTech companies, digital assets, and licensing regimes across various jurisdictions. Works with founders and investment firms on compliance, operating models, and cross-border expansion strategies.
Post Comment