20 CFR §401.190

We do not consider the disclosure of information about a deceased person to be a clearly unwarranted invasion of that person's privacy. However, in disclosing information about a deceased person, we follow the principles in § 401.115 to insure that the privacy rights of a living person are not violated.