GDPR:

27: Material Scope: Data of Deceased Persons out of Scope

This Regulation does not apply to the personal data of deceased persons. Member States may provide for rules regarding the processing of personal data of deceased persons.