Revised Uniform Fiduciary Access to Digital Assets Act: What Executors Need to Know

What RUFADAA Does

The Revised Uniform Fiduciary Access to Digital Assets Act is a legal framework for fiduciary access to a deceased person's digital assets. Adopted in nearly every US state since 2015, it replaced the patchwork of state laws that left executors guessing whether they had any right to manage an email account, social media profile, or cryptocurrency wallet.

Before RUFADAA, platforms could — and routinely did — refuse all access to a deceased user's accounts, citing their terms of service and federal privacy laws. Executors with valid court appointments were still locked out.

RUFADAA doesn't give executors unlimited access. It creates a structured framework with strict rules about who controls what.

The Three-Tier Priority System

RUFADAA establishes a hierarchy that determines who ultimately controls access to digital accounts:

Tier 1: Platform-level settings. If the account holder configured a platform tool — Google Inactive Account Manager, Apple Legacy Contact, Facebook Legacy Contact — the user's direction through that tool takes priority for the digital assets it covers. This is the most commonly misunderstood part of the law. Your will does not override a Google setting that says "delete my account after 18 months of inactivity."

Tier 2: Will or trust provisions. If no platform tool was configured, express fiduciary directions in a will or trust may authorize access to digital assets. A general bequest of "all my property" is typically insufficient to consent to disclosure of communication contents; that consent must be express.

Tier 3: Terms of service. If the deceased configured no platform tools and left no will with digital asset provisions, the platform's terms of service control the outcome. Most ToS agreements prohibit third-party access and reserve the right to delete accounts upon death.

Catalog vs. Content: The Critical Distinction

RUFADAA interacts with the federal Stored Communications Act, which creates a sharp line between two types of access:

Catalog access means information identifying the people with whom the user communicated and the dates and times of those communications. An executor with standard fiduciary authority can typically obtain this without special consent; subject lines are not automatically part of the catalog.

Content access means the substance of electronic communications, such as the body of emails and messages. The Stored Communications Act bars platforms from disclosing those contents to third parties without the account holder's explicit consent. Under RUFADAA, that consent may come from a platform-level tool (Tier 1) or specific will language (Tier 2). Access to other stored files is governed by RUFADAA and provider rules, not the SCA's communications-content restriction.

This distinction was tested in New York's Surrogate's Court. In cases like Matter of Serrano and Matter of White, courts ordered platforms to release metadata but upheld their refusal to disclose email content where no explicit consent existed.

What This Means for Executors in Practice

If you're settling an estate and need access to digital accounts:

1. Check platform settings first. Log in to each service's legacy or inactive account tool. If the deceased configured a legacy contact or inactive account manager, that contact has priority access.

2. Review the will for digital asset language. Look for specific clauses authorizing access to digital accounts and their contents. If the will says nothing about digital assets, access to the contents of electronic communications may be limited, though other digital assets may still be accessible under RUFADAA or provider rules.

3. Gather your legal documents. A common packet includes a death certificate, government-issued ID, and any court appointment documents the provider requires. Google and Yahoo require a US court order for content requests; Apple may require one when there is no Legacy Contact, with language confirming lawful consent.

4. Know the limits. Even with RUFADAA authority, you cannot access accounts where the deceased actively opted out of fiduciary access through a platform tool. And X (formerly Twitter) does not provide third-party access under any circumstances, regardless of your legal authority.

The Digital Estate Toolkit maps every major platform's requirements against RUFADAA's priority system, with the exact documents, timelines, and communication scripts executors need for each one.