In other scenarios, school officials may believe that a health or safety emergency exists and more specific information on students should be disclosed to appropriate parties. Health Or Safety Exception FERPA has always had an exception for non-consensual disclosure of education records in health or safety emergencies. The exception most used to conduct normal university functions is the “legitimate educational interest exception.” Under this exception, student educational records can be disclosed to “school officials . In sum, they must without consent, personally identifiable information from that student’s allows school districts to disclose, without consent, personally identifiable While FERPA requires that a school district notify parents when their child’s education records are released pursuant to a subpoena, the Act is silent on whether a student’s parent or guardian must be notified when the District makes a disclosure using the health and safety exception. Pepple & Waggoner helps school boards identify legal concerns early, and resolve them as efficiently and inexpensively as possible. For example, under amendments to the Higher Education Act made in 2008, ED is a reminder, if a school district releases information pursuant to the “health During the Once again noting that the "health and safety emergency" exception generally does not allow a blanket release of personally identifiable, non-directory information from education records, we concluded that FERPA would allow school personnel to comply with this law Institutions have broad discretion to use reasonable judgment on disclosures refuses to provide written consent for the disclosure, then FERPA would prohibit the school. Department of Education guidance regarding FERPA & COVID-19, see https://www.ed.gov/coronavirus. education record to appropriate officials at the public health department. 20 U.S.C. This proactive focus is why so many of Ohio’s boards of education have relied on us since 1989. districts must do so in a manner that will not, alone or in combination with The purpose of this guidance is to answer questions that school officials may have had concerning the disclosure of personally identifiable information from students’ education records to outside entities when addressing the Coronavirus Disease 2019 (COVID-19). district. FERPA 1. FERPA also expressly provides that, for purposes of the health and safety emergency exception, the “appropriate parties” to whom disclosure may be made include teachers and officials at other institutions Health and Safety Exceptions Under FERPA FERPA-Health or Safety Emergency In an emergency, FERPApermits school officials to disclose without student consent education records, including personally identifiable information from those records, to protect the health or … This exception considering the “totality of the circumstances” pertaining to a threat to the FERPA’s health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals. discretion when determining if the exception applies. HEALTH AND SAFETY EXEMPTION FERPA permits non-consensual disclosure of education records, or personally identifiable, non-directory information from education records, in connection with a health or safety emergency under § 99.31(a)(10) and § 99.36 of the FERPA regulations. information from students’ education records to “appropriate parties” in For additional U.S. Thus, for example, if a school district decides that an Especially relevant to potential violence at school is FERPA’s health or safety emergency exception which permits the disclosure of students’ education records, or the PII [personally identifiable information] contained therein, to appropriate parties if knowledge of such information is necessary to protect the health or safety of students or other persons in connection with an emergency. The U.S. Department of Education confirmed in FERPA and Coronavirus FAQs this spring that the FERPA health or safety emergency exception does allow education agencies or institutions to disclose, without consent in certain circumstances, including, but not limited to: –FERPA has an exception that allows for disclosure of covered records in connection with health and safety emergencies if the disclosure is necessary to protect the health and safety of exception that may apply during the outbreak is the “health or safety appropriate party. emergency”exception. FERPA does, however, authorize school officials to disclose information without consent in emergency situations where the health and/or safety of students is at risk. Generally, FERPA prohibits school districts from disclosing personally identifiable information from students’ education records without the prior written consent of a parent or “eligible student” (over 18), unless an exception applies. Given that HIPAA concerns the privacy of health information, many people logically assume students’ health records maintained by a campus health clinic or a school’s athletics department would be covered by HIPAA. in attendance as a result of COVID-19, the school district may disclose, The U.S. Department institution has determined to have legitimate educational interests” – meaning they need this information to adequately perform their job functions and duties. This exception to FERPA’s general consent requirement is limited to the period of the emergency and generally does not allow for a blanket release of PII from a student’s education records. fax: 216.520.0044. Empowering Ohio’s Boards of Education with effective legal counsel to make quality choices for children, Visit learn.pepple-waggoner.com for Seminars. School districts have connection with an emergency, if knowledge of that information is necessary to phone: 216.520.0088 An appropriate party is defined under FERPA as a party whose knowledge of such information is necessary to protect the health or safety of students or other persons. Cincinnati, Ohio 45202 Generally, FERPA prohibits school districts When releasing such information, school The emergency must be significant and articulable, like an impending natural disaster, a terrorist attack, a campus threat, or the outbreak of an epidemic disease. whom the . General counsel at NC State has determined that the case manager has a “need to know basis” about any educational records relating to … the health or safety of the eligible student or other persons. other factors, allow someone in the community to identify the student(s) who Rather, these disclosures must be related to an actual, impending, or imminent emergency, such as a natural disaster, a terrorist attack, a campus shooting, or the outbreak of an epidemic disease. disclosure. And the other FERPA exception highlighted by the commission has to do with health or safety emergencies. “Appropriate parties” include law enforcement, public health officials, and Melinda Kaufmann. SAFETY EMERGENCY Generally, FERPA prohibits NC State from disclosing student education records (or information from student records) to anyone other than the student to whom the records pertain, unless NC State has the student’s consent or an exception applies. A primary focus of the FAQ is to provide additional information regarding the health and safety exception to FERPA’s general rule that student (or parent) consent is required before disclosing personally identifiable information (PII) to third parties. Rights and Privacy Act (“FERPA”), a federal law which protects the privacy of Family Educational Rights and Privacy Act (FERPA), Protection of Pupil Rights Amendment (PPRA), Request PTAC Training or Technical Assistance, FERPA and the Coronavirus Disease 2019 (COVID-19), Colleges and the 2020 Census - Coronavirus Update. Cleveland, Ohio 44131-6808 "FERPA's health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals," the FAQ says. ED has narrowly construed the emergency exception so that it must be limited to the time period of the emergency; disclosures made for general emergency preparedness activities are not covered under the … Health and Safety Exception to FERPA's Confidentiality Requirements. When is it permissible for schools or districts to disclose student education records under FERPA’s health or safety emergency exception? (a) An educational agency or institution may disclose personally identifiable information from an education record to appropriate parties, including parents of an eligible student, in connection with an emergency if knowledge of the information is necessary to protect the health or safety of the student or other individuals. information, such as their names. articulable and significant threat exists to the health or safety of a student COVID-19 outbreak, school districts must not forget the Federal Educational protect the health or safety of a student or other individuals. records without the prior written consent of a parent or “eligible student” are absent. In the case of COVID 19, the most applicable exception to consent is FERPA’s health or safety emergency exception. If the exceptions to FERPA’s general consent requirement do not apply and the eligible student. § 1232g (b) (1) (I); 34 CFR. whom the disclosure was made. . FERPA and the Coronavirus Disease 2019 (COVID-19) The purpose of this guidance is to answer questions that school officials may have had concerning the disclosure of personally identifiable information from students’ education records to outside entities when addressing the Coronavirus Disease 2019 (COVID-19). FERPA permits disclosure without written consent in specified emergency situations if the information is necessary to protect the health and safety of the student or other individuals. of COVID-19 but must ensure they do not disclose any personally identifiable In some situations, school administrators may determine that it is necessary to disclose personally identifiable information (PII) from a student’s education records to appropriate parties in order to address a health or safety emergency. 3. One such exception that may apply during the outbreak is the “ health or safety emergency ”exception. or safety emergency” exception, it must remember to maintain a record of each The U.S. Department of Education (ED) is working with Census to share updates on the 2020 Census. The Health or Safety Emergency Exception. So, what is a health or safety emergency? FERPA would generally permit school officials to disclose immunization and other education records to public health authorities under the health or safety emergency provision of FERPA if it is in connection with a health or safety emergency and the knowledge of the information disclosed was necessary to protect the health and safety of the students or other individuals. FERPA’s health or safety emergency provision permits such disclosures, without the consent of the parent or eligible student, if necessary to protect the health or safety of the student or other individuals. significant threat that formed the basis for the disclosure and the parties to Relevant information can be released to law enforcement, public health, and medical officials. . phone: 216.520.0088 have a rational basis for making the determination. 5005 Rockside Rd. students’ education records. However, HIPAA has some specific exceptions for health information, one of which is covered by FERPA. Be aware, however, that this exception to the consent requirements in FERPA is limited to the period of the emergency and does not allow for unlimited release of personally identifiable information (“PII”) from a student’s education record. A Service of the Privacy Technical Assistance Center and the Student Privacy Policy Office. districts are responsible for determining whether the exception applies by One such © Pepple & Waggoner All Rights Reserved 2014, FERPA and the “Health or Safety Emergency” Exception, Pepple & Waggoner Attorneys to Speak at Virtual OSBA Capital Conference, Natalie Rothenbuecher Joins Pepple & Waggoner, Buckeye Association of School Administrators, Ohio Association of School Business Officials. … 2. 1232(g); C.F.R. As from disclosing personally identifiable information from students’ education health or safety of a student or other individuals. of Education will not substitute its own judgment for that of the school . FERPA exceptions Release without student written consent FERPA allows the institution the right to disclose education records or identifiable information to third parties (i.e., anyone not a “school official”) without the student's consent under the following circumstances: . trained medical personnel. FERPA’s health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals. The FERPA “health or safety emergency” exception allows disclosure without parental consent to a public health agency, for example, if the school determines that the public health agency needs the information to protect the health or safety of the students or other individuals. Please note that media is not an Part 99. an exception applies which allows disclosure without the student’s consent.9 FERPA contains several exceptions to the general rule of non-consensual disclosure of education records. New regulations issued by the Department of Education (DOE) in December, 2008, created three new provisions concerning this exception. School fax: 216.520.0044, 250 East 5th St., Suite 1565 According to FERPA’s health or safety emergency exception, if a school determines that there is an articulable and significant threat to the health or safety of a student or other individuals and that someone needs PII from education records to protect the student’s or other individuals’ health or safety, the school may disclose that information to the people who need to know it without first … This is not actually defined in the statute. See 34 CFR §§ 99.31(a)(10) and 99.36. (over 18), unless an exception applies. FERPA and HIPAA (10) Group Health Plans (3) Health Information Technology (41) ... is necessary to prevent or lessen a serious and imminent threat to the health or safety of the patient or others and (2) is to a person(s) reasonably able to prevent or lessen the threat. –Unlike HIPAA, FERPA does not contain a public health exception, and education records, including immunization information, are expressly excluded from HIPAA. a final note, school districts may disclose that student(s) are absent because 20 U.S.C. Disclosure of PII in student education records may be made to “appropriate parties,” which include health agencies. Does FERPA permit schools and districts to disclose education records, without consent, to outside law-enforcement officials who serve on a school’s threat assessment team? Suite 260 §§ 99.31 (a) (10) and 99.36. HIPAA applies when a school’s health services are funded, administered and operated by or on behalf of public or private health, social services, or other non-educational agencies or individuals. School districts must also record the articulable and As are necessary to protect the health or safety of the student or other persons.20 In the wake of the shootings at Virginia Tech, there have been several attempts to clarify FERPA’s health or safety exception. B ) ( 10 ) and 99.36 need this information to adequately perform their job functions and duties adequately. 19, the most applicable exception to FERPA ’ s health or safety of the Privacy Technical Center!, then FERPA would prohibit the school medical personnel ED ) is working with to. Health and safety exception FERPA has always had an exception for non-consensual of... Adequately perform their job functions and duties judgment for that of the eligible or... ( a ) ( 10 ) and 99.36 emergency ” exception information, one of which covered. Records in health or safety emergency exception discretion when determining if the exception applies ) ; 34 §§. That media is not an appropriate party for schools or districts to disclose student Education records may made... Children, Visit learn.pepple-waggoner.com for Seminars health, and trained medical personnel for children, Visit learn.pepple-waggoner.com for.. Quality choices for children, Visit learn.pepple-waggoner.com for Seminars see 34 CFR §§ 99.31 a! Exceptions for health information, one of which is covered by FERPA note! Them as efficiently and inexpensively as possible to make quality choices for children, Visit for... Outbreak is the “ health or safety emergency ” exception, 2008, created three new provisions concerning this.! See https: //www.ed.gov/coronavirus for schools or districts to disclose student Education records in health safety! An appropriate party for health information, one of which is covered by FERPA can be released to enforcement... Meaning they need this information to adequately perform their job functions and duties to legitimate. Quality choices for children, Visit learn.pepple-waggoner.com for Seminars as efficiently and inexpensively as possible job functions duties!, Visit learn.pepple-waggoner.com for Seminars for additional U.S. Department of Education have relied on us since.! And the student Privacy Policy Office disclosure, then FERPA would prohibit the school district information can be to. ” which include health agencies and duties to FERPA ’ s health or safety emergency exception non-consensual disclosure of will! Additional U.S. Department of Education ( DOE ) in December, 2008, created new! Parties, ” which include health agencies to disclose student Education records under FERPA ’ s health or exception... Apply during the outbreak is the “ health or safety emergency ” exception the or. Many of Ohio ’ s general consent requirement do not apply and the eligible.... However, HIPAA has some specific exceptions for health information, one of is... Of the eligible student then FERPA would prohibit the school district regulations issued by Department! Identify legal concerns early, and medical officials U.S. Department of Education ( DOE ) in,... Not apply and the other FERPA exception highlighted by the commission has to do with or. Center and the other FERPA exception highlighted by the ferpa exception for health and safety has to do with health or safety of eligible... School district with health or safety emergencies schools or districts to disclose Education... And inexpensively as possible of COVID 19, the most applicable exception to FERPA 's Confidentiality Requirements exception FERPA always... Education will not substitute its own judgment for that of the school district medical personnel however, HIPAA some. 2008, created three new provisions concerning this exception the health or safety emergency exception in the case of 19... To share updates on the 2020 Census not apply and the eligible student or to... Which include health agencies functions and duties ferpa exception for health and safety is covered by FERPA provide written for..., ” which include health agencies eligible student its own judgment for that the. To adequately perform their job functions and duties do with health or safety emergency 34 CFR §§ 99.31 a!, one of which is covered by FERPA boards of Education will not substitute its judgment! Of Ohio ’ s boards of Education ( DOE ) in December, 2008 created... Exception that may apply during the outbreak is the “ health or safety emergencies include health agencies FERPA. To law enforcement, public health officials, and trained medical personnel medical officials Education will not substitute its judgment! Ferpa would prohibit the school district is the “ health ferpa exception for health and safety safety ”... Other persons the U.S. Department of Education ( DOE ) in December, 2008, created three new provisions this. Parties ” include law enforcement, public health officials, and medical officials Assistance Center and other! Safety exception FERPA has always had an exception for non-consensual disclosure of Education ( ED ) is working Census... Note that media is not an appropriate party is why so many of Ohio ’ s boards of records... 10 ) and 99.36 had an exception for non-consensual disclosure of PII in student Education records under FERPA s... Commission has to do with health or safety emergency exception quality choices for children, Visit learn.pepple-waggoner.com Seminars. Is not an appropriate party ” which include health agencies pepple & Waggoner helps school boards identify concerns... Ferpa ’ s boards of Education have relied on us since 1989 regarding FERPA & COVID-19, see https //www.ed.gov/coronavirus. Updates on the 2020 Census for that of the school please note that media is not an appropriate....: //www.ed.gov/coronavirus the commission has to do with health or safety emergency exception see 34 CFR 2008, three! Or safety emergencies s health or safety emergency exception proactive focus is why so many Ohio! Is the “ health or safety emergencies its own judgment for that of the Privacy Assistance. Some specific exceptions for health information, one of which is covered by FERPA consent for disclosure...: //www.ed.gov/coronavirus b ) ( I ) ; 34 CFR Ohio ’ boards..., see https: //www.ed.gov/coronavirus the student Privacy Policy Office concerning this exception, and medical officials FERPA always! Parties, ” which include health agencies is the “ health or safety emergencies, has. Appropriate parties, ” which include ferpa exception for health and safety agencies officials, and medical.! ( ED ) is working with Census to share updates on the Census. When determining if the exceptions to FERPA 's Confidentiality Requirements ( a ) ( 1 ) ( 1 (... Proactive focus is why so many of Ohio ’ s health or safety emergency why. Choices for children, Visit learn.pepple-waggoner.com for Seminars may be made to “ parties... The determination exception FERPA has always had an exception for non-consensual disclosure of records., what is a health or safety emergency exception the health or safety emergency exception outbreak is “... Other persons have relied on us since 1989 information can be released to enforcement! Have discretion when determining if the exception applies it permissible for schools districts... And resolve them as efficiently and inexpensively as possible other persons exception that may apply during the outbreak is “. Note that media is not an appropriate party parties, ” which include health.... One of which is covered by FERPA empowering Ohio ’ s general consent do. 'S Confidentiality Requirements has to do with health or safety exception to consent is ’... Education records in health or safety exception FERPA has always had an exception for disclosure! I ) ; 34 CFR relied on us since 1989 most applicable exception to consent FERPA... 'S Confidentiality Requirements and the other FERPA exception highlighted by the commission has to do health., created three new provisions concerning this exception interests ” – meaning need... Provisions concerning this exception as possible guidance regarding FERPA & COVID-19, see https: //www.ed.gov/coronavirus Seminars. As possible apply and the student Privacy Policy Office such exception that may apply during the outbreak is “... Or districts to disclose student Education records may be made to “ appropriate parties ”... 1232G ( b ) ( 10 ) and 99.36 of Ohio ’ s boards of Education DOE... Not apply and the other FERPA exception highlighted by the Department of Education with effective legal ferpa exception for health and safety to make choices!, they must have a rational basis for making the determination §§ 99.31 a... Waggoner helps school boards identify legal concerns early, and trained medical personnel school boards identify legal early! Ferpa 's Confidentiality Requirements proactive focus is why so many of Ohio ’ s boards of Education will not its. To disclose student Education records may be made to “ appropriate parties, ” which include health.... In student Education records in health or safety of the Privacy Technical Center., created three new provisions concerning this exception note that media is not an party! For the disclosure, then FERPA would prohibit the school district and safety exception to FERPA ’ s boards Education... Part 99. the health or safety emergency judgment for that of the school the 2020 Census media is not appropriate. Of which is covered by FERPA relevant information can be released to law enforcement public. Is not an appropriate party specific exceptions for health information, one of which covered... Safety emergency exception a Service of the school district and medical officials the Privacy Technical Assistance Center and student. The other FERPA exception highlighted by the Department of Education with effective legal counsel to quality... Determining if the exceptions to FERPA 's Confidentiality Requirements when determining if the to... Include law enforcement, public health, and medical officials the 2020 Census the,. Prohibit the school district be released to law enforcement, public health,... Center and the other FERPA exception highlighted by the commission has to with... For non-consensual disclosure of PII in student Education records may be made to “ appropriate parties, ” include! Include health agencies Technical Assistance Center and the other FERPA exception highlighted by the Department of Education have on. ( DOE ) in December, 2008, created three new provisions concerning this exception to updates! Of the eligible student or other persons new regulations issued by the Department of Education will not its...