Yeah. The question is do we change FERPA (add notification requirements and penalties) OR do we remove the exemption that places education-related medical recor

Yeah. The question is do we change FERPA (add notification requirements and penalties) OR do we remove the exemption that places education-related medical records under FERPA (and let that info fall under HIPAA, where it should have been all along)? I think the latter makes sense - the school is acting as a medical provider, so HIPAA should apply. No get-out-of-jail card because they’re a school. Of course, the problem with any meaningful penalties is what does that really accomplish? Crippling a school district (by yanking funding) doesn’t help anybody in the long run - it just makes education in that area worse.