HIPAA Governs Patient Privacy As To Medical Providers-
HIPAA is the main federal law protecting patient privacy and confidentiality, which stands for the Health Insurance Portability and Accountability Act, and it protects confidential patient information. Yes, it has been an administrative headache for medical providers, but has an important overall purpose of protecting this information from the encroaching "Big Brother" syndrome of your patient information getting into the hands of employer's or prying eyes of those with no rights to this information. The Act might just protect you from your doctor or nurse volunteering to speak out on a national news program like CNN and announcing to the world that you abused drugs, or may stop your provider from saying something to harm your reputation in print!
Whether nutritionist Cherilyn Lee did or did not breach confidentiality would be up to the board governing her profession, presumably in California and believe me, lots of folks have emailed the California Board of Registered Nursing (BRN) asking this question.
As to the privacy rights of patients surviving death under HIPAA the World Privacy Forum is a nonprofit, non-partisan, 501(c)(3), public interest research group and its website includes the following on this point:
Do Privacy Rights Survive Death?
Yes. Under HIPAA, a patient's privacy rights survive death and last forever. We are not sure how much sense that makes, but that is what the rule provides. A deceased patient's legally authorized executor or administrator, or a person who is otherwise legally authorized to act on the behalf of the deceased patient or patient's estate, can exercise the privacy rights of a patient.
http://virginiabeach.injuryboard.com/medical-malpractice/attorney-client-patient-privacy-rights-surviving-deathdid-michael-jacksons-former-nurse-ignore-confidentiality-and-privacy-rights-under-hipaa.aspx?googleid=266366