There is a "HIPPA"[0] law that is often referenced in the US when seeking medical services. Presumably it really only applies to interstate insurers, but is often believed to "protect" some information from being shared without a "patient's" consent.
> Presumably it really only applies to interstate insurers,
It applies to all public and private health insurers/payers and healthcare providers in the United States. (Source: over a decade working in roles with some involvement in HIPAA compliance for a large, public, intrastate healthcare payer.)
Specifically, relating to the protection of information after death, the HIPAA Privacy Rule protects information for 50 years after death, but does give full control to the decedent's “personal representative” as determined by applicable law during that period.
HIPAA, actually.
> Presumably it really only applies to interstate insurers,
It applies to all public and private health insurers/payers and healthcare providers in the United States. (Source: over a decade working in roles with some involvement in HIPAA compliance for a large, public, intrastate healthcare payer.)
Specifically, relating to the protection of information after death, the HIPAA Privacy Rule protects information for 50 years after death, but does give full control to the decedent's “personal representative” as determined by applicable law during that period.