HIPAA and FERPA: competing or collaborating?

Area of Science:

• Health Law
• Education Law
• Privacy Law

Background:

• The Family Educational Rights and Privacy Act (FERPA) protects student educational records.
• The Health Insurance Portability and Accountability Act (HIPAA) protects patient health information.
• A conflict arises when students are also patients, requiring clarification on applicable privacy laws.

Purpose of the Study:

• To examine the intersection of HIPAA and FERPA when student educational records overlap with patient health information.
• To provide guidance for schools navigating the complexities of dual privacy regulations.
• To highlight the need for individualized assessment due to the lack of a universal solution.

Main Methods:

• Analysis of the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA).
• Examination of case-specific scenarios and legal interpretations at the intersection of student and patient privacy.
• Consideration of state-specific laws that may impact HIPAA/FERPA compliance.

Main Results:

• There is no single "one size fits all" approach to managing HIPAA and FERPA compliance for students who are patients.
• Specific wording within HIPAA or FERPA can significantly alter compliance requirements.
• Individual state laws must be considered alongside federal regulations.

Conclusions:

• Schools must carefully evaluate their unique circumstances to determine the appropriate privacy regulations (HIPAA or FERPA) to follow.
• The interpretation of key terms within the laws is crucial for accurate compliance.
• Future legislative efforts should aim to simplify the language of HIPAA and FERPA to prioritize student and patient welfare over legal interpretation.