How do we exchange information with entities that have PHI in their school records?
Generally, a patient/parent authorization is required to release records to these entities, or to request information from them. School records often contain health information, and frequently there must be exchange of information between schools and health care providers (e.g., pediatric clinics and school nurses). School records on students are covered under FERPA (described in first question), not HIPAA.
