Yes, doctor-patient privilege generally survives death. At common law and under most state statutes, a physician cannot disclose a deceased patient’s confidential medical information simply because the patient has died. Federal privacy law reinforces this: HIPAA protects a deceased person’s health information for 50 years after their date of death. But the privilege is not absolute, and several important exceptions apply depending on who is asking for the records and why.
How Long the Protection Lasts
Under the HIPAA Privacy Rule, individually identifiable health information remains protected for 50 years following the date of death. After that 50-year window closes, the information is no longer considered “protected health information” at all, and a healthcare provider can use or disclose it freely. This means old medical records, physician diaries, casebooks, and even photograph collections tied to patients who died more than 50 years ago fall outside HIPAA’s reach entirely.
State laws layer on top of HIPAA and can provide additional protections, but they cannot offer less protection than HIPAA does. So even if a state tried to shorten that 50-year window, HIPAA would override it. Some states have their own specific timelines or conditions, but the federal floor remains firm.
Who Can Access a Deceased Person’s Records
The fact that the privilege survives doesn’t mean no one can ever see the records. It means the decision about access shifts from the patient to their “personal representative.” Under HIPAA, a personal representative is the executor, administrator, or other person with legal authority to act on behalf of the deceased or their estate. State law determines who qualifies for that role, which typically means someone appointed by a probate court.
This is a narrower group than many people assume. A spouse, adult child, or sibling does not automatically have the right to access medical records just because they are family. In Texas, for example, the law explicitly requires a court-appointed personal representative to sign a written consent for release. Without that legal designation, a provider should not hand over the records, even to close relatives.
Wrongful Death and Litigation Exceptions
The most common situation where the privilege breaks down after death is litigation. If a family member files a wrongful death lawsuit, the deceased’s medical history often becomes directly relevant to the case, and filing the suit can effectively waive the privilege for treatment records related to the claims being made.
This waiver is not automatic or unlimited. A wrongful death plaintiff typically cannot obtain the deceased’s medical records before a lawsuit is actually filed. The records need to be relevant to the claims at issue. If the lawsuit alleges only physical injuries, for instance, the privilege over mental health or psychotherapy records may remain intact. But if the case involves claims of depression, PTSD, or other psychological harm, those therapy records can become fair game as well.
When a plaintiff bundles multiple claims together (negligence, personal injury, and wrongful death in a single action), the privilege is generally waived for all medical treatment related to that combined action. Courts can also issue orders compelling the production of medical records when they determine the information is essential to resolving the case.
Psychotherapy Records Get Extra Scrutiny
Mental health and psychotherapy records occupy a somewhat different space. The U.S. Supreme Court recognized a distinct psychotherapist-patient privilege in 1996, and legal scholars have debated whether it should automatically extend beyond death in the same way the general medical privilege does. Attorney-client privilege, by comparison, was confirmed by the Supreme Court that same year to survive death, building on centuries of established practice.
The psychotherapy privilege is newer and less settled. Some legal commentators argue that importing the “survives forever” assumption from older privileges into psychotherapy without careful analysis is unwise, given the uniquely sensitive nature of therapy disclosures. In practice, most courts still treat psychotherapy records as privileged after death, but the boundaries are less clearly defined than for general medical records, and challenges arise more frequently.
Law Enforcement and Public Health Exceptions
HIPAA carves out specific exceptions that allow disclosure of a deceased person’s health information without anyone’s consent. A healthcare provider may disclose records to a coroner or medical examiner to identify a body, determine a cause of death, or carry out other duties authorized by law. If a provider suspects a death resulted from criminal conduct, they may alert law enforcement and share relevant health information.
Public health authorities also have access. A provider can disclose information to agencies authorized to collect data for preventing or controlling disease, tracking vital events like births and deaths, conducting public health investigations, or carrying out public health interventions. These exceptions exist regardless of whether the patient is alive or dead.
Insurance Claims and Everyday Requests
Outside of court proceedings and the specific exceptions above, there is no general right for third parties to access a deceased person’s medical records. Life insurance companies, employers, or curious family members cannot simply request records from a provider and expect to receive them. The confidentiality obligation persists, and disclosure requires either written authorization from the personal representative or a valid legal order.
This can create practical frustration for families trying to understand a loved one’s medical history, settle insurance claims, or investigate concerns about the care that was provided. The path forward in most cases is to establish legal authority through probate court, at which point the personal representative can authorize the release of records as needed.