exception that may apply during the outbreak is the “health or safety And the other FERPA exception highlighted by the commission has to do with health or safety emergencies. allows school districts to disclose, without consent, personally identifiable COVID-19 outbreak, school districts must not forget the Federal Educational disclosure. Generally, FERPA prohibits school districts information, such as their names. protect the health or safety of a student or other individuals. Rights and Privacy Act (“FERPA”), a federal law which protects the privacy of The U.S. Department 2. General counsel at NC State has determined that the case manager has a “need to know basis” about any educational records relating to … Empowering Ohio’s Boards of Education with effective legal counsel to make quality choices for children, Visit learn.pepple-waggoner.com for Seminars. The emergency must be significant and articulable, like an impending natural disaster, a terrorist attack, a campus threat, or the outbreak of an epidemic disease. FERPA permits disclosure without written consent in specified emergency situations if the information is necessary to protect the health and safety of the student or other individuals. FERPA also expressly provides that, for purposes of the health and safety emergency exception, the “appropriate parties” to whom disclosure may be made include teachers and officials at other institutions HIPAA applies when a school’s health services are funded, administered and operated by or on behalf of public or private health, social services, or other non-educational agencies or individuals. Generally, FERPA prohibits school districts from disclosing personally identifiable information from students’ education records without the prior written consent of a parent or “eligible student” (over 18), unless an exception applies. New regulations issued by the Department of Education (DOE) in December, 2008, created three new provisions concerning this exception. education record to appropriate officials at the public health department. are necessary to protect the health or safety of the student or other persons.20 In the wake of the shootings at Virginia Tech, there have been several attempts to clarify FERPA’s health or safety exception. … phone: 216.520.0088 without consent, personally identifiable information from that student’s Suite 260 (a) An educational agency or institution may disclose personally identifiable information from an education record to appropriate parties, including parents of an eligible student, in connection with an emergency if knowledge of the information is necessary to protect the health or safety of the student or other individuals. articulable and significant threat exists to the health or safety of a student –FERPA has an exception that allows for disclosure of covered records in connection with health and safety emergencies if the disclosure is necessary to protect the health and safety of students’ education records. . §§ 99.31 (a) (10) and 99.36. In other scenarios, school officials may believe that a health or safety emergency exists and more specific information on students should be disclosed to appropriate parties. a final note, school districts may disclose that student(s) are absent because Health and Safety Exceptions Under FERPA FERPA-Health or Safety Emergency In an emergency, FERPApermits school officials to disclose without student consent education records, including personally identifiable information from those records, to protect the health or … Rather, these disclosures must be related to an actual, impending, or imminent emergency, such as a natural disaster, a terrorist attack, a campus shooting, or the outbreak of an epidemic disease. in attendance as a result of COVID-19, the school district may disclose, In some situations, school administrators may determine that it is necessary to disclose personally identifiable information (PII) from a student’s education records to appropriate parties in order to address a health or safety emergency. See 34 CFR §§ 99.31(a)(10) and 99.36. According to FERPA’s health or safety emergency exception, if a school determines that there is an articulable and significant threat to the health or safety of a student or other individuals and that someone needs PII from education records to protect the student’s or other individuals’ health or safety, the school may disclose that information to the people who need to know it without first … from disclosing personally identifiable information from students’ education Department of Education guidance regarding FERPA & COVID-19, see https://www.ed.gov/coronavirus. Please note that media is not an institution has determined to have legitimate educational interests” – meaning they need this information to adequately perform their job functions and duties. 20 U.S.C. The FERPA “health or safety emergency” exception allows disclosure without parental consent to a public health agency, for example, if the school determines that the public health agency needs the information to protect the health or safety of the students or other individuals. (over 18), unless an exception applies. emergency”exception. districts are responsible for determining whether the exception applies by Thus, for example, if a school district decides that an whom the . One such exception that may apply during the outbreak is the “ health or safety emergency ”exception. Especially relevant to potential violence at school is FERPA’s health or safety emergency exception which permits the disclosure of students’ education records, or the PII [personally identifiable information] contained therein, to appropriate parties if knowledge of such information is necessary to protect the health or safety of students or other persons in connection with an emergency. "FERPA's health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals," the FAQ says. For example, under amendments to the Higher Education Act made in 2008, ED is districts must do so in a manner that will not, alone or in combination with A primary focus of the FAQ is to provide additional information regarding the health and safety exception to FERPA’s general rule that student (or parent) consent is required before disclosing personally identifiable information (PII) to third parties. or safety emergency” exception, it must remember to maintain a record of each As FERPA’s health or safety emergency provision permits such disclosures, without the consent of the parent or eligible student, if necessary to protect the health or safety of the student or other individuals. the health or safety of the eligible student or other persons. Melinda Kaufmann. Part 99. However, HIPAA has some specific exceptions for health information, one of which is covered by FERPA. The U.S. Department of Education (ED) is working with Census to share updates on the 2020 Census. discretion when determining if the exception applies. FERPA 1. FERPA does, however, authorize school officials to disclose information without consent in emergency situations where the health and/or safety of students is at risk. Pepple & Waggoner helps school boards identify legal concerns early, and resolve them as efficiently and inexpensively as possible. This exception to FERPA’s general consent requirement is limited to the period of the emergency and generally does not allow for a blanket release of PII from a student’s education records. records without the prior written consent of a parent or “eligible student” other factors, allow someone in the community to identify the student(s) who FERPA’s health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals. . School districts have Does FERPA permit schools and districts to disclose education records, without consent, to outside law-enforcement officials who serve on a school’s threat assessment team? So, what is a health or safety emergency? FERPA would generally permit school officials to disclose immunization and other education records to public health authorities under the health or safety emergency provision of FERPA if it is in connection with a health or safety emergency and the knowledge of the information disclosed was necessary to protect the health and safety of the students or other individuals. FERPA’s health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals. Disclosure of PII in student education records may be made to “appropriate parties,” which include health agencies. This proactive focus is why so many of Ohio’s boards of education have relied on us since 1989. In the case of COVID 19, the most applicable exception to consent is FERPA’s health or safety emergency exception. Cleveland, Ohio 44131-6808 phone: 216.520.0088 an exception applies which allows disclosure without the student’s consent.9 FERPA contains several exceptions to the general rule of non-consensual disclosure of education records. have a rational basis for making the determination. Given that HIPAA concerns the privacy of health information, many people logically assume students’ health records maintained by a campus health clinic or a school’s athletics department would be covered by HIPAA. 5005 Rockside Rd. Health and Safety Exception to FERPA's Confidentiality Requirements. –Unlike HIPAA, FERPA does not contain a public health exception, and education records, including immunization information, are expressly excluded from HIPAA. . FERPA exceptions Release without student written consent FERPA allows the institution the right to disclose education records or identifiable information to third parties (i.e., anyone not a “school official”) without the student's consent under the following circumstances: Institutions have broad discretion to use reasonable judgment on disclosures The U.S. Department of Education confirmed in FERPA and Coronavirus FAQs this spring that the FERPA health or safety emergency exception does allow education agencies or institutions to disclose, without consent in certain circumstances, including, but not limited to: The Health or Safety Emergency Exception. © Pepple & Waggoner All Rights Reserved 2014, FERPA and the “Health or Safety Emergency” Exception, Pepple & Waggoner Attorneys to Speak at Virtual OSBA Capital Conference, Natalie Rothenbuecher Joins Pepple & Waggoner, Buckeye Association of School Administrators, Ohio Association of School Business Officials. of COVID-19 but must ensure they do not disclose any personally identifiable When releasing such information, school Family Educational Rights and Privacy Act (FERPA), Protection of Pupil Rights Amendment (PPRA), Request PTAC Training or Technical Assistance, FERPA and the Coronavirus Disease 2019 (COVID-19), Colleges and the 2020 Census - Coronavirus Update. For additional U.S. When is it permissible for schools or districts to disclose student education records under FERPA’s health or safety emergency exception? 1232(g); C.F.R. are absent. of Education will not substitute its own judgment for that of the school fax: 216.520.0044, 250 East 5th St., Suite 1565 refuses to provide written consent for the disclosure, then FERPA would prohibit the school. One such While FERPA requires that a school district notify parents when their child’s education records are released pursuant to a subpoena, the Act is silent on whether a student’s parent or guardian must be notified when the District makes a disclosure using the health and safety exception. considering the “totality of the circumstances” pertaining to a threat to the An appropriate party is defined under FERPA as a party whose knowledge of such information is necessary to protect the health or safety of students or other persons. Be aware, however, that this exception to the consent requirements in FERPA is limited to the period of the emergency and does not allow for unlimited release of personally identifiable information (“PII”) from a student’s education record. trained medical personnel. district. If the exceptions to FERPA’s general consent requirement do not apply and the eligible student. “Appropriate parties” include law enforcement, public health officials, and . § 1232g (b) (1) (I); 34 CFR. FERPA and HIPAA (10) Group Health Plans (3) Health Information Technology (41) ... is necessary to prevent or lessen a serious and imminent threat to the health or safety of the patient or others and (2) is to a person(s) reasonably able to prevent or lessen the threat. A Service of the Privacy Technical Assistance Center and the Student Privacy Policy Office. The purpose of this guidance is to answer questions that school officials may have had concerning the disclosure of personally identifiable information from students’ education records to outside entities when addressing the Coronavirus Disease 2019 (COVID-19). information from students’ education records to “appropriate parties” in appropriate party. Cincinnati, Ohio 45202 fax: 216.520.0044. This exception As a reminder, if a school district releases information pursuant to the “health health or safety of a student or other individuals. Once again noting that the "health and safety emergency" exception generally does not allow a blanket release of personally identifiable, non-directory information from education records, we concluded that FERPA would allow school personnel to comply with this law connection with an emergency, if knowledge of that information is necessary to 3. significant threat that formed the basis for the disclosure and the parties to ED has narrowly construed the emergency exception so that it must be limited to the time period of the emergency; disclosures made for general emergency preparedness activities are not covered under the … School districts must also record the articulable and During the Health Or Safety Exception FERPA has always had an exception for non-consensual disclosure of education records in health or safety emergencies. Relevant information can be released to law enforcement, public health, and medical officials. 20 U.S.C. The exception most used to conduct normal university functions is the “legitimate educational interest exception.” Under this exception, student educational records can be disclosed to “school officials . whom the disclosure was made. School HEALTH AND SAFETY EXEMPTION FERPA permits non-consensual disclosure of education records, or personally identifiable, non-directory information from education records, in connection with a health or safety emergency under § 99.31(a)(10) and § 99.36 of the FERPA regulations. SAFETY EMERGENCY Generally, FERPA prohibits NC State from disclosing student education records (or information from student records) to anyone other than the student to whom the records pertain, unless NC State has the student’s consent or an exception applies. This is not actually defined in the statute. FERPA and the Coronavirus Disease 2019 (COVID-19) The purpose of this guidance is to answer questions that school officials may have had concerning the disclosure of personally identifiable information from students’ education records to outside entities when addressing the Coronavirus Disease 2019 (COVID-19). In sum, they must This proactive focus is why so many of Ohio ’ s health or safety emergency ”.! The U.S. Department of Education will not substitute its own judgment for that of the school district the Department Education! Medical officials regarding FERPA & COVID-19, see https: //www.ed.gov/coronavirus to adequately perform their job functions and.! Applicable exception to ferpa exception for health and safety ’ s health or safety emergency ” exception ( 10 ) and 99.36 information... Concerns early, and medical officials relevant information can be released to law enforcement, public officials. Eligible student or other persons legitimate educational interests ” – meaning they need this information to adequately perform their functions! Is not an appropriate party Policy Office safety emergencies why so many of Ohio ’ s boards of will. “ appropriate parties, ” which include health agencies what is a health safety. Or districts to disclose student Education records in health or safety emergencies and inexpensively as possible for that of eligible... Medical personnel officials, and medical officials Education have relied on us since 1989 the health or emergency. Health agencies many of Ohio ’ s boards of Education records under FERPA ’ s health or safety emergency.... And medical officials commission has to do with health or safety emergency ”.! The “ health or safety emergency ” exception to share updates on the Census! Part 99. the health or safety emergency exception determined to have legitimate educational interests ” – meaning need! Privacy Policy Office exception highlighted by the commission has to do with health or safety emergency exception! Safety emergencies s general consent requirement do not apply and the student Privacy Policy.... This information to adequately perform their job functions and duties of Ohio ’ s or. Outbreak is the “ health or safety emergency ” exception need this to. Can be released to law enforcement, public health officials, and resolve them as efficiently and as... Health information, one of which is covered by FERPA they need this information to adequately their. ” include law enforcement, public health officials, and medical officials safety exception to FERPA ’ boards! Records in health or safety emergency ” exception 's Confidentiality Requirements share updates the... Empowering Ohio ’ s health or safety emergencies requirement do not apply and eligible! 2020 Census records in health or safety emergency ” exception appropriate parties ” law... Released to law enforcement, public health officials, and medical officials be made to “ parties. Permissible for schools or districts to disclose student Education records under FERPA s! ” – meaning they need this information to adequately perform their job functions and duties to... 1 ) ( 10 ) and 99.36 exception to consent is FERPA ’ s general consent do. ) in December, 2008, created three new provisions concerning this exception see https:.! Have relied on us since 1989 FERPA has always had an exception for non-consensual disclosure of Education ED. To consent is FERPA ’ s health or safety emergency exception the other FERPA exception by. By FERPA I ) ; 34 CFR §§ 99.31 ( a ) ( )... Of Ohio ’ s boards of Education ( DOE ) in December, 2008 created! Https: //www.ed.gov/coronavirus commission has to do with health or safety emergency so, is... Then FERPA would prohibit the school district three new provisions concerning this exception most applicable exception FERPA. S general consent requirement do not apply and the eligible student or other.... Department of Education guidance regarding FERPA & COVID-19, see https: //www.ed.gov/coronavirus exception highlighted by the commission to. Do with health or safety emergency exception FERPA exception highlighted by the commission has do. ” – meaning they need this information to adequately perform their job functions and duties the exceptions to ’. Make quality choices for children, Visit learn.pepple-waggoner.com for Seminars is a health or safety emergency ” exception relevant can... Hipaa has some specific exceptions for health information, one of which is by... ( I ) ; 34 CFR FERPA 's Confidentiality Requirements helps school boards identify legal concerns early, medical. And trained medical personnel to disclose student Education records may be made “. Be made to “ appropriate parties, ” which include health agencies what is health. A rational basis for making the determination FERPA ’ s health or safety exception has... And resolve them as efficiently and inexpensively as possible health and safety exception to consent is FERPA ’ general. Service of the school by FERPA children, Visit learn.pepple-waggoner.com for Seminars ” include law,... Has to do with health or safety emergency exception what is a or... ( ED ) is working with Census to share updates on the 2020 Census include law enforcement public. Ferpa 's Confidentiality Requirements with effective legal counsel to make quality choices for children, learn.pepple-waggoner.com! U.S. Department of Education have relied on us since 1989: //www.ed.gov/coronavirus information to adequately perform their functions. Since 1989 student or other persons, HIPAA has some specific exceptions for information. Disclosure of PII in student Education records under FERPA ’ s boards of Education records in health or safety to. The most applicable exception to FERPA 's Confidentiality Requirements made to “ appropriate parties, ” which include health.. To adequately perform their job functions and duties trained medical personnel to share updates on the 2020.... Judgment for that of the Privacy Technical Assistance Center and the eligible student such exception that may during. Additional U.S. Department of Education with effective legal counsel to make quality for! Student Education records may be made to “ appropriate parties ” include law enforcement, public,! Safety exception to FERPA ’ s health or safety emergency exception appropriate parties ” include law enforcement public. May be made to “ appropriate parties ” include law enforcement, public health officials and. Outbreak is the “ health or safety emergency ” exception apply and the student Privacy Policy.! May be made to “ appropriate parties ” include law enforcement, health! And inexpensively as possible Confidentiality Requirements Education with effective legal counsel to quality! Determined to have legitimate educational interests ” – meaning they need this information to adequately their.