Who you are, and the first two people who will hold accounts.
The full legal name. It is published on every notice a Data Principal reads.
Health, banking, welfare delivery…
You, probably. Holds tenant settings and role assignment.
Section 8(9) requires these details to be published.
Neither account is created with a password
Both are invited. Each person sets their own credential from a single-use link that expires in seven days — nobody, including whoever runs this deployment, can set a password on somebody else's account and then act as them. Until the officer accepts, the citizen portal and the cookie banner refuse to act, because under s.8(9) there is nobody for them to act through.
Digital Personal Data Protection Act, 2023 · Digital Personal Data Protection Rules, 2025