The GDPR/Data protection does not apply to data of someone who has passed/deceased although the standard requirements of confidentiality should be maintained when dealing with any persons who may have passed.