This research is motivated by the absence of comprehensive legal regulations governing the protection of personal data belonging to deceased bank customers, creating legal uncertainty for heirs and financial institutions. The study aims to analyze the legal protection of deceased customers' personal data and the responsibilities of banking institutions in maintaining its confidentiality. This research employs a normative legal research method using statutory and conceptual approaches through the analysis of legislation, legal literature, and other legal materials. The findings indicate that the protection of personal data after death has not been comprehensively regulated, causing its implementation to rely on banking confidentiality rules, personal data protection principles, and the civil rights of heirs. The novelty of this research lies in examining the relationship between posthumous personal data protection and the rights of heirs to obtain necessary information without compromising data confidentiality. The study concludes that clearer and more integrated regulations are required to ensure legal certainty while balancing personal data protection with the legitimate rights of heirs