HIPAA vs. FERPA

Understanding Student Privacy in School Nursing

+ This post contains affiliate links. +

Helpful School Nurse Tip: One of the most common questions new school nurses ask is, "Can I share this information?" Understanding the differences between HIPAA and FERPA will help you answer that question with confidence. Although the two laws are often confused, knowing which one applies can make communicating with staff, families, and healthcare providers much easier.

Remember, I'm not an attorney or legal expert and this is not official legal advice. This information is intended for educational purposes only. Please consult with your school district for all of their definitions, policies/procedures, & guidelines.

HIPAA vs. FERPA: The Basics

If you’re wondering where HIPAA ends and FERPA begins, you’re not alone. Here’s a quick breakdown:

What Is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) ensures the privacy of patient health information (PHI) in healthcare settings. It’s what doctors, hospitals, and insurance providers follow to keep patient information secure.

In a school setting, HIPAA may apply if you work with outside healthcare providers, like a student’s pediatrician or therapist.

Think About Who Needs to Know

As school nurses, we often ask ourselves:

Does this staff member need this information to keep the student safe?
Am I sharing only the information necessary?
Is this information being shared with someone who has a legitimate educational interest?

Keeping those three questions in mind can help guide many everyday conversations.

What Is FERPA?

The Family Educational Rights and Privacy Act (FERPA) protects educational records, including health-related information maintained by the school. These records can include IEPs, 504 plans, school physical exams and immunization records.

FERPA governs how schools collect, share, and store student information. Unlike HIPAA, it’s designed specifically for educational institutions.

Key Differences Between HIPAA and FERPA

HIPAA applies to healthcare providers.
FERPA applies to schools and educational records.
Example: If a student’s doctor faxes you a medication order, that’s HIPAA. Once the order becomes part of the student’s school record, it’s governed by FERPA.

Sometimes, these laws intersect. For instance, if you need to share a student’s health information with an outside provider, you may need consent from the parent/guardian to comply with both HIPAA and FERPA. Always check your district’s policies for specific guidance.

What About Sharing Health Conditions With Teaching School Staff?

FERPA allows the sharing of student health information with school staff on a "need-to-know" basis if it is necessary for them to perform their job duties and ensure the safety or well-being of the student. Here’s a bit more detail:

FERPA and Sharing Health Information

Permissible Sharing: FERPA permits school nurses and administrators to share student health information with teachers, aides, and other school staff who need the information to support the student effectively. For example, sharing a diabetes action plan with a teacher who supervises lunchtime would be appropriate.
Parental Consent: In most cases, schools do not need explicit parental consent to share information internally for legitimate educational interests, such as maintaining safety or providing necessary care.
Minimum Necessary Information: FERPA encourages sharing only the information necessary for the staff member to perform their role. For example, you might tell a bus driver that a student has severe asthma and what to do in case of an attack, without divulging unrelated medical history.

Emergency Situations

FERPA also provides more flexibility in emergencies. If a student’s health or safety is at immediate risk, you can share relevant information with those who can help, including external parties like first responders.

In General Everyday Situations

One of the most impactful parts of your role is helping teachers and staff understand student health needs of any student in general. What seems like simple knowledge to you, might be new information for someone outside of the health field. Here are a few tips to make those conversations effective:

1. Start With the Basics

Explain the health condition in simple terms. Focus on what staff need to know, like:

Common symptoms.
Triggers to avoid.
Immediate steps to take during an emergency.

For example, when teaching about asthma, highlight signs of an asthma attack and demonstrate how to use an inhaler or spacer if necessary.

2. Create Handy Resources

Quick-reference guides or infographics can be lifesavers for busy staff. Consider including:

Allergy protocols.
Seizure action plans.
Diabetes care instructions.

These resources should be easy to understand and accessible in classrooms, staff lounges, or online portals.

3. Use Real-Life Scenarios

Bring learning to life by sharing real-world examples. Role-playing scenarios, like responding to a student’s allergic reaction and using a trainer epi-pen, can help staff feel prepared and confident.

4. Respect Confidentiality

Remind staff to keep student health information private. Share only what is necessary to provide safe care. For example, instead of saying, “Jasmine has diabetes,” you can teach, “If a student has low blood sugar, offer a snack like juice or crackers.”

Common Situations School Nurses Face

You might encounter questions like:

A teacher asks why a student leaves class every day.
A coach wants to know if an athlete has asthma.
A substitute teacher asks about a student's seizure disorder.
A cafeteria worker asks about food allergies.

Each situation may require sharing some information—but usually not every detail. Sharing only what's necessary helps protect student privacy while keeping students safe.

Bringing It All Together

As a school nurse, you’re the bridge between student health and education. Understanding the basics of HIPAA and FERPA helps you protect privacy, while teaching staff about health conditions ensures students receive safe, informed care.

By creating a supportive environment with clear communication and resources, you’re setting everyone up for success.

FINAL THOUGHTS

No school nurse memorizes every FERPA or HIPAA situation.

When you're unsure, pause, review your district's policies, and don't hesitate to ask questions.

Protecting student privacy while supporting student safety is something you'll become more comfortable with over time—and every conversation helps build your confidence.