Dead people have basically no rights, at least in the United States.
> The HIPAA Privacy Rule protects the individually identifiable health information about a decedent for 50 years following the date of death of the individual.
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...