HIPAA vs. FERPA

What New School Nurses Need to Know

+ This post contains affiliate links. +

Hopefully Helpful School Nurse Tip: Starting your career as a school nurse can feel like learning a new language—especially when it comes to laws like HIPAA and FERPA. These privacy regulations are often confused, but understanding the differences is essential to managing student health information appropriately. And while you're juggling those details, you’re also teaching school staff how to care for students with health conditions. Let’s break it all down so you feel confident in both roles!

Remember, I'm not an attorney or legal expert and this is not official legal advice. This information is intended for educational purposes only. Please consult with your school district for all of their definitions, policies/procedures, & guidelines.

HIPAA vs. FERPA: The Basics

If you’re wondering where HIPAA ends and FERPA begins, you’re not alone. Here’s a quick breakdown:

What Is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) ensures the privacy of patient health information (PHI) in healthcare settings. It’s what doctors, hospitals, and insurance providers follow to keep patient information secure.

In a school setting, HIPAA may apply if you work with outside healthcare providers, like a student’s pediatrician or therapist.

What Is FERPA?

The Family Educational Rights and Privacy Act (FERPA) protects educational records, including health-related information maintained by the school. These records can include IEPs, 504 plans, school physical exams and immunization records.

FERPA governs how schools collect, share, and store student information. Unlike HIPAA, it’s designed specifically for educational institutions.

Key Differences Between HIPAA and FERPA

HIPAA applies to healthcare providers.
FERPA applies to schools and educational records.
Example: If a student’s doctor faxes you a medication order, that’s HIPAA. Once the order becomes part of the student’s school record, it’s governed by FERPA.

Sometimes, these laws intersect. For instance, if you need to share a student’s health information with an outside provider, you may need consent from the parent/guardian to comply with both HIPAA and FERPA. Always check your district’s policies for specific guidance.

What About Sharing Health Conditions With Teaching School Staff?

FERPA allows the sharing of student health information with school staff on a "need-to-know" basis if it is necessary for them to perform their job duties and ensure the safety or well-being of the student. Here’s a bit more detail:

FERPA and Sharing Health Information

Permissible Sharing: FERPA permits school nurses and administrators to share student health information with teachers, aides, and other school staff who need the information to support the student effectively. For example, sharing a diabetes action plan with a teacher who supervises lunchtime would be appropriate.
Parental Consent: In most cases, schools do not need explicit parental consent to share information internally for legitimate educational interests, such as maintaining safety or providing necessary care.
Minimum Necessary Information: FERPA encourages sharing only the information necessary for the staff member to perform their role. For example, you might tell a bus driver that a student has severe asthma and what to do in case of an attack, without divulging unrelated medical history.

Emergency Situations

FERPA also provides more flexibility in emergencies. If a student’s health or safety is at immediate risk, you can share relevant information with those who can help, including external parties like first responders.

In General Everyday Situations

One of the most impactful parts of your role is helping teachers and staff understand student health needs of any student in general. What seems like simple knowledge to you, might be new information for someone outside of the health field. Here are a few tips to make those conversations effective:

1. Start With the Basics

Explain the health condition in simple terms. Focus on what staff need to know, like:

Common symptoms.
Triggers to avoid.
Immediate steps to take during an emergency.

For example, when teaching about asthma, highlight signs of an asthma attack and demonstrate how to use an inhaler or spacer if necessary.

2. Create Handy Resources

Quick-reference guides or infographics can be lifesavers for busy staff. Consider including:

Allergy protocols.
Seizure action plans.
Diabetes care instructions.

These resources should be easy to understand and accessible in classrooms, staff lounges, or online portals.

3. Use Real-Life Scenarios

Bring learning to life by sharing real-world examples. Role-playing scenarios, like responding to a student’s allergic reaction and using a trainer epi-pen, can help staff feel prepared and confident.

4. Respect Confidentiality

Remind staff to keep student health information private. Share only what is necessary to provide safe care. For example, instead of saying, “Jasmine has diabetes,” you can teach, “If a student has low blood sugar, offer a snack like juice or crackers.”

Bringing It All Together

As a school nurse, you’re the bridge between student health and education. Understanding the basics of HIPAA and FERPA helps you protect privacy, while teaching staff about health conditions ensures students receive safe, informed care.

By creating a supportive environment with clear communication and resources, you’re setting everyone up for success.

Need More Tools?
Check out this HIPAA vs. FERPA Quick Guide or these Teacher Tips for Staff Training to make your work easier.