Skip to main content
Free Tool · Health Records Guide

Free HIPAA for Schools Guide

Confused about whether HIPAA or FERPA governs your student health records? Describe your scenario and get instant, scenario-specific guidance plus a printable compliance action plan.

Runs entirely in your browser · No login · No data uploaded

HIPAA for Schools Guide

Understand which privacy law governs your student health records

Step 1 of 3

1Describe Your Situation

How to Use the HIPAA for Schools Guide in 3 Steps

Follow these steps to get results in under a minute

01
Describe Your Situation
Select your role, the type of health record involved, and briefly explain the scenario or disclosure request you are handling.
02
Answer Five Quick Questions
Confirm billing status, who holds the record, student age, clinic type, and whether a third party is involved — the key factors that determine which law applies.
03
Print Your Compliance Report
Review whether HIPAA, FERPA, or both govern your situation, tick off each action item, and print the completed summary for your institution's records.

How HIPAA for Schools Guide Compares

vs spreadsheets, manual processes, and paid platforms

Feature UniCloud360 HIPAA for Schools Guide Manual Policy LookupLegal Counsel ReviewGeneric Privacy Checklist
Determines HIPAA vs FERPA applicability Instant scenario analysis Time-consuming research ⚠️ Requires own interpretation Not context-specific
Scenario-specific action checklist Dynamic per inputs No structured checklist ⚠️ Standard recommendations only ⚠️ Generic boilerplate
Covers school-based health clinic edge cases SBHC & billing scenarios ⚠️ Partial — policy-level only Full legal scope Not included
Printable compliance report One-click with logo Formatted separately ⚠️ Word doc only ⚠️ PDF only
Covers mental health record rules Separate guidance ⚠️ General guidance only Full legal scope Not differentiated
Free to use Always free Hourly legal fees Retainer required ⚠️ Freemium limits

Does HIPAA Apply to Schools?

Most K-12 schools are not covered entities under HIPAA. Student health records maintained by school staff — including nurse records and immunisation logs — are typically governed by FERPA, not HIPAA. This surprises many administrators who assume all health records fall under HIPAA.

The critical exception arises when a school operates a school-based health centre (SBHC) that bills insurance or Medicaid for clinical services. In that scenario, the clinic functions as a HIPAA-covered healthcare provider and the records it generates are subject to HIPAA, not FERPA — even though both facilities share the same campus.

Mental health records held by a school counsellor remain under FERPA. But if a contracted therapist provides services on campus and maintains their own records independently, those records may fall under HIPAA. Understanding this distinction is critical before any disclosure.

Need a HIPAA-ready student health record management system?

UniCloud360 provides role-based access, audit logs, and data processing agreements designed for FERPA and HIPAA compliance in higher education.

Try Free HIPAA for Schools Guide →

What Health & Compliance Staff Are Saying

Trusted by lecturers and students across Sri Lankan universities

4.9
★★★★★
4 reviews
KN
Karen Nwosu
School Health Coordinator
★★★★★

"This guide finally cleared up the HIPAA vs FERPA confusion our nursing staff had for years. The checklist is exactly what we needed for our policy update."

EO
Dr. Emeka Osei
Campus Health Director
★★★★★

"Our SBHC bills Medicaid, so we had genuine HIPAA obligations our admin team didn't fully understand. This tool surfaced the exact gap and gave us a remediation plan."

LJ
Lena Johansson
EdTech Privacy Lead
★★★★☆

"I use this before every school health module demo. Knowing whether the client falls under HIPAA or FERPA changes our data architecture entirely — this tool gets it right."

PM
Priya Mehta
School Principal
★★★★★

"A parent requested counselling records and we weren't sure which law applied. This guide walked us through it in under three minutes. Printable report was a bonus."