HIPAA vs. FERPA
Understanding Student Privacy in School Nursing
.png)
HIPAA vs. FERPA: The Basics
If you’re wondering where HIPAA ends and FERPA begins, you’re not alone. Here’s a quick breakdown:
What Is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) ensures the privacy of patient health information (PHI) in healthcare settings. It’s what doctors, hospitals, and insurance providers follow to keep patient information secure.
In a school setting, HIPAA may apply if you work with outside healthcare providers, like a student’s pediatrician or therapist.
Think About Who Needs to Know
As school nurses, we often ask ourselves:
- Does this staff member need this information to keep the student safe?
- Am I sharing only the information necessary?
- Is this information being shared with someone who has a legitimate educational interest?
Keeping those three questions in mind can help guide many everyday conversations.
What Is FERPA?
The Family Educational Rights and Privacy Act (FERPA) protects educational records, including health-related information maintained by the school. These records can include IEPs, 504 plans, school physical exams and immunization records.
FERPA governs how schools collect, share, and store student information. Unlike HIPAA, it’s designed specifically for educational institutions.
Key Differences Between HIPAA and FERPA
- HIPAA applies to healthcare providers.
- FERPA applies to schools and educational records.
- Example: If a student’s doctor faxes you a medication order, that’s HIPAA. Once the order becomes part of the student’s school record, it’s governed by FERPA.
Sometimes, these laws intersect. For instance, if you need to share a student’s health information with an outside provider, you may need consent from the parent/guardian to comply with both HIPAA and FERPA. Always check your district’s policies for specific guidance.
What About Sharing Health Conditions With Teaching School Staff?
FERPA allows the sharing of student health information with school staff on a "need-to-know" basis if it is necessary for them to perform their job duties and ensure the safety or well-being of the student. Here’s a bit more detail:
FERPA and Sharing Health Information
- Permissible Sharing: FERPA permits school nurses and administrators to share student health information with teachers, aides, and other school staff who need the information to support the student effectively. For example, sharing a diabetes action plan with a teacher who supervises lunchtime would be appropriate.
- Parental Consent: In most cases, schools do not need explicit parental consent to share information internally for legitimate educational interests, such as maintaining safety or providing necessary care.
- Minimum Necessary Information: FERPA encourages sharing only the information necessary for the staff member to perform their role. For example, you might tell a bus driver that a student has severe asthma and what to do in case of an attack, without divulging unrelated medical history.
Emergency Situations
FERPA also provides more flexibility in emergencies. If a student’s health or safety is at immediate risk, you can share relevant information with those who can help, including external parties like first responders.
In General Everyday Situations
One of the most impactful parts of your role is helping teachers and staff understand student health needs of any student in general. What seems like simple knowledge to you, might be new information for someone outside of the health field. Here are a few tips to make those conversations effective:
1. Start With the Basics
Explain the health condition in simple terms. Focus on what staff need to know, like:
- Common symptoms.
- Triggers to avoid.
- Immediate steps to take during an emergency.
For example, when teaching about asthma, highlight signs of an asthma attack and demonstrate how to use an inhaler or spacer if necessary.
2. Create Handy Resources
Quick-reference guides or infographics can be lifesavers for busy staff. Consider including:
These resources should be easy to understand and accessible in classrooms, staff lounges, or online portals.
3. Use Real-Life Scenarios
Bring learning to life by sharing real-world examples. Role-playing scenarios, like responding to a student’s allergic reaction and using a trainer epi-pen, can help staff feel prepared and confident.
4. Respect Confidentiality
Remind staff to keep student health information private. Share only what is necessary to provide safe care. For example, instead of saying, “Jasmine has diabetes,” you can teach, “If a student has low blood sugar, offer a snack like juice or crackers.”
Common Situations School Nurses Face
You might encounter questions like:
- A teacher asks why a student leaves class every day.
- A coach wants to know if an athlete has asthma.
- A substitute teacher asks about a student's seizure disorder.
- A cafeteria worker asks about food allergies.
Each situation may require sharing some information—but usually not every detail. Sharing only what's necessary helps protect student privacy while keeping students safe.
Bringing It All Together
As a school nurse, you’re the bridge between student health and education. Understanding the basics of HIPAA and FERPA helps you protect privacy, while teaching staff about health conditions ensures students receive safe, informed care.
By creating a supportive environment with clear communication and resources, you’re setting everyone up for success.
FINAL THOUGHTS
No school nurse memorizes every FERPA or HIPAA situation.
When you're unsure, pause, review your district's policies, and don't hesitate to ask questions.
Protecting student privacy while supporting student safety is something you'll become more comfortable with over time—and every conversation helps build your confidence.
Check out these other popular DOASN blog posts & product links.
.png)
.png)
.png "How can school nurses be prepared to respond to health emergencies in the school setting? What do nurses put in their health first response kits?")
.png)
.png)
