What federal law prohibits schools from sharing identifiable information about students?

• A. Family Educational Rights and Privacy Act of 1974 (FERPA)
• B. Health Insurance Portability and Accountability Act (HIPAA)
• C. Individuals with Disabilities Education Act (IDEA)
• D. Americans with Disabilities Act (ADA)

Answer: (A)

FERPA, the Family Educational Rights and Privacy Act of 1974, is the law that protects the privacy of student education records and generally requires schools to obtain written consent before sharing identifiable information from those records. It covers any information that could identify a student and is contained in education records, such as grades, attendance, and disciplinary notes. The rule applies to schools receiving federal funding, which includes most public K–12 schools and many higher education institutions. Before a school can disclose such information to third parties, it must have the student’s (or parent’s) consent or rely on a permitted exception, such as sharing directory information with proper notice and the option to opt out. However, even with directory information, families can request that certain details not be disclosed.

HIPAA governs the privacy of health information held by covered entities like doctors, hospitals, and insurers, and it generally does not govern a school’s education records. IDEA focuses on special education services and procedural protections for students with disabilities, including confidentiality of IEP-related information, but it is separate from the general privacy provisions governing all student records. The ADA addresses disability rights and access but does not serve as the blanket rule for sharing student records.