FERPA HIPAA MAINTAINING STUDENT CONFIDENTIALITY FERPA HIPAA This

FERPA & HIPAA: MAINTAINING STUDENT CONFIDENTIALITY

FERPA & HIPAA This presentation is a compilation of information and resources from The Department of Health and Human Services, The U. S. Department of Education and others.

FERPA (Family Educational Rights and Privacy Act) Protects the privacy of student educational records. Records directly related to a student and maintained by an educational agency Student health records Nurse documentation Exceptional Student Education (ESE) records Schools must annually notify parents and eligible students of their rights under FERPA Applies to all schools that receive funds under an applicable program of the U. S. Department of Education.

FERPA Parents are granted rights, on behalf of their children. Rights transfer to students when they turn 18 years old OR attend a postsecondary institution, but Parents who claim children as dependents on their taxes retain their rights.

FERPA gives parents, legal guardians and eligible students the following rights regarding educational records: Inspect and review education records Challenge and seek amendments of education records Require written consent prior to the disclosure of personally identifiable information

FERPA DIRECTORY INFORMATION Schools may disclose, without consent, "directory" information student's name address telephone number date and place of birth honors and awards dates of attendance. However, schools must tell parents and eligible students about directory information and allow parents and eligible students a reasonable amount of time to request that the school not disclose directory information about them.

FERPA NON-DIRECTORY INFORMATION Non-directory information cannot be release to anyone without prior written consent of the student or parent. Faculty and staff can access this information only if they have a legitimate academic need to do so. Do not need written consent: Health and safety of the student is an issue Judicial order/subpoena Disciplinary hearing

CONFIDENTIAL DATA ELEMENTS MAY INCLUDE, BUT NOT LIMITED TO: Social Security Number Student health information Gender Transcripts/Grades Discipline information (infractions, outcomes, etc. ) Student ID Lunch status (free or reduced) Socioeconomic status Title I status

CONFIDENTIAL DATA ELEMENTS MAY INCLUDE, BUT NOT LIMITED TO: IEP status and details Exceptionality Race, ethnicity, and/or nationality Individual assessment results and course grades Migrant status, homeless status Medicaid status Other data elements parents may request to exclude from directory

HIPAA (Health Insurance Portability and Accountability Act) Created to improve health insurance portability, prevent health care fraud and misuse, simplify health care administration, and protect the privacy of an individual’s health information. Educational records protected by FERPA are exempt from the HIPAA privacy rule.

FERPA & HIPAA IN SCHOOLS HIPAA Privacy Rule excludes information considered to be education records under FERPA from HIPAA requirements. School nurse or other health records maintained on students receiving services under the IDEA are considered to be education records and are also subject to FERPA

FERPA & HIPAA IN SCHOOLS School nurse is subject to HIPAA if the school nurse or school engage in a HIPAA transaction Transmission of information between two parties to carry out financial or administrative activities related to health care Submitting claims Must still be secured under FERPA before records are disclosed

MAINTAIN CONFIDENTIALITY Do Use computer passwords Use physical security of data Hand students graded work directly to the student Make sure grades are not visible when returning work Be on guard with educational information Keep all documentation private Be aware of classroom visitors Post grades by using unique numbers, letters or other symbols only the teacher and individual student know Do know your student’s legal guardian

MAINTAIN CONFIDENTIALITY Don’t post students grade by name Don’t use full or part of student’s identification number or social security number when posting grades Don’t leave graded student work in public places Don’t distribute a group of papers back in class so students have to search through the pile to find their own work Don’t ask students in class to return graded work for other students Don’t leave confidential papers lying around Don’t leave computers on while unattended Don’t discuss students unless you are in a meeting regarding their legitimate education interest Don’t email information to unverified parent email addresses-be sure you’re not accidentally disclosing student information to the wrong people

FERPA AND VIRTUAL INSTRUCTION Do Instruct students how to change or blur background Set settings so participants cannot record lessons Keep student documents and grades private Keep all documentation private Keep any student passwords private

FERPA and Virtual Instruction Don’t video students if recording a lesson Don’t mention student’s full name if recording a lesson Don’t post pictures on social media or other online sites unless parental consent has been given

HIPPA and COVID-19 Don’t leave student’s medical information unattended Don’t share staff or student’s medical information via email Don’t discuss staff or student’s medical information on social media Don’t text staff or student’s medical information

CONFIDENTIALITY BEST PRACTICE Obtain written consent Assume all information directly related to a student is part of that’s student’s education record and therefore cannot be disclosed without written consent.

REFERENCES Joint Guide on the Application of the Family Educational Rights and Privacy Act and the Health Insurance Portability and Accountability Act of 1996 to Student Health Records. Retrieved at www. hhs. gov FERPA/HIPAA Data Quality Course. Retrieved at www. nces. ed. gov FERPA and HIPAA. Retrieved at www. hhs. gov HIPAA and FERPA An Update on Privacy Issues in Schools. Center of Health and Health Care in Schools. Retrieved at www. healthinschools. org Understanding the Privacy Rights of HIPAA & FERPA in Schools. The National Law Review. Retrieved at www. natlawreview. com Student Confidentiality: HIPAA and FERPA in the School Setting. Retrieved at www. sbh 4 all. org Memorandum HIPAA and FERPA. Retrieved at www. mass. gov Family Educational Rights and Privacy Act. Retrieved at www 2. ed. gov