HIPAA and FERPA are both federal laws designed to protect the privacy and security of individuals. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) applies to the healthcare industry where the Family Educational Rights and Privacy Act of 1974 (FERPA) applies to the education industry.
HIPAA provides privacy and security for protected health information (PHI). FERPA is in place to protect the privacy of student education records and designates rights for students and their parents. According to the Department of Education, education records include such information as academic report cards, transcripts, class schedules, disciplinary records, contact information, and family information.
An example of consent to share information form. Check with your individual LEA, ISD and/or Service Providing Agency for specific guidance.
FERPA. For each scenario, they identify key FERPA requirements and takeaways and other questions to consider for best practices. Also includes a listing of other available resources at the end of presentation.
Additional related resources on the website include the following:
Joint Guidance on the Application of the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to Student Health Records
HIPAA Specific Support:
Permitted Uses and Disclosures: Exchange for Public Health Activities
Medicaid and Children's Health Insurance Program resources:
More information can be found on the Student HIPAA/FERPA Consent page.
* HIPAA - Health Insurance Portability and Accountability Act is a federal law designed to provide privacy standards to protect patients' medical records and other health information provided to health plans, doctors, hospitals and other health care providers.
* FERPA - The Family Educational Rights and Privacy Act is a federal law that gives parents the right to have access to their children’s education records, the right to seek to have the records amended, and the right to have some control over the disclosure of personally identifiable information from the education records.