What privacy protections apply to education records and how should information be shared with schools and guardians?

• A. Comply with HIPAA for education records; obtain releases.
• B. Share education records with schools automatically.
• C. Apply FERPA only to adults; schools may ignore.
• D. Comply with FERPA for education records; obtain appropriate releases; share necessary information while safeguarding privacy.

Answer: (D)

Education records are protected by FERPA, which controls how information about students can be shared with schools and guardians. The right approach is to comply with FERPA for education records, obtain appropriate releases when required, and share only the information that is necessary for the educational purpose while safeguarding privacy. HIPAA is not the default framework for typical school education records, and FERPA rights apply to parents or eligible students regardless of age; disclosures aren’t automatic and must be limited to authorized recipients or situations. A student’s or parent’s right to opt out of releasing certain directory information also guides what can be shared, and schools should provide annual FERPA notices to inform families of their rights.