The HIPAA regulations, which carry civil and even criminal penalties if violated, require doctors, hospitals, pharmacies and insurers to notify patients about the privacy rules, describe how their medical information may be used and explain patients' rights under the new guidelines.Looks like the default is to permit disclosure of general condition, unless the patient insists on strict privacy. Patient's choice.Unless patients insist on strict privacy, hospitals still can tell people who ask for patients by name what their general condition is, and hospitals can issue names of patients to clergy who want to visit ailing parishioners.
If patients don't want their names or other information released, health officials cannot even acknowledge that those individuals are in the hospital.
Yahoo! News - Communities Adjust to Medical Privacy Laws
But according to the killers Terri is already dead and has no rights. So no right to privacy.