Supposedly, the family has not given the hospital permission to speak. It appears HIPAA continues after death. Therefore, we get the self-serving statements of their shyster lawyer and the family versus mostly silence from the hospital.
Health Information of Deceased Individuals
45 CFR 160.103, paragraph (2)(iv) of the definition of “protected health information”
Background
The HIPAA Privacy Rule protects the individually identifiable health information about a decedent for 50 years following the date of death of the individual
http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/decedents.html
Yep, see my #48.