Some folks may get confused by PowerSchool saying that if they have medical records on students, they may have to notify under HIPAA.
Most student medical/health records are not covered under HIPAA. They are covered under FERPA.
If the district is billing the student's health insurance for services like speech therapy, physical therapy, or occupational therapy, then there's a HIPAA issue. Or if the school has arrangements with an actual clinic that is providing medical/health services to students. But most things like doctor's absence notes or even allergy action plans or school medication orders are not under HIPAA.
If the district has a health plan for employees that it administers, there's also a HIPAA issue there.
#PowerSchool #databreach #incidentresponse #HIPAA #FERPA
nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq0k72v2h56j98750zjfuu92m206fh6p6latxmup869ym4espay6eqjqwz7x (nprofile…wz7x) nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq07pxlft5l6zfk7cf2427an0e2yh4ecd56tlr9eswhndflxwsdfzs5rc4cm (nprofile…c4cm)
Dissent Doe :cupofcoffee: /
npub1rh…klmka
2025-01-09 14:42:38
Author Public Key
npub1rh9ks6jqam8nj4kccfk505f70erhhq0g0kcr6w32c5ywyqgltdpsmklmkaSeen on
wss://relay.nostr.bandPublished at
2025-01-09 14:42:38Event JSON
{
"id": "17ce71a104f829d3f33eccdfaa00ddb9c6a1d1e14acb24bbacb78b72eea1de44",
"pubkey": "1dcb686a40eecf3956d8c26d47d13e7e477b81e87db03d3a2ac508e2011f5b43",
"created_at": 1736433758,
"kind": 1,
"tags": [
[
"p",
"7dbca62af4d48a7f51e29279c2ab6a7e937d075feacdbe04fa29375cc03d26b2",
"wss://relay.mostr.pub"
],
[
"p",
"7f826fa574fe849b7b095555eecdf9512f5ce1b4d2fe32e60ebcda9f99d06a45",
"wss://relay.mostr.pub"
],
[
"p",
"5f9fc593634f9a531a54b19c8c70ca78d75327c7e9058776d129ffd00a95c937",
"wss://relay.mostr.pub"
],
[
"p",
"94ddca4e0f34bc82b63e377c58e58087698f01585293b2a382e3d4894cc00ea9",
"wss://relay.mostr.pub"
],
[
"t",
"powerschool"
],
[
"t",
"databreach"
],
[
"t",
"incidentresponse"
],
[
"t",
"hipaa"
],
[
"t",
"FERPA"
],
[
"proxy",
"https://infosec.exchange/users/PogoWasRight/statuses/113798922818219239",
"activitypub"
]
],
"content": "Some folks may get confused by PowerSchool saying that if they have medical records on students, they may have to notify under HIPAA. \n\nMost student medical/health records are not covered under HIPAA. They are covered under FERPA. \n\nIf the district is billing the student's health insurance for services like speech therapy, physical therapy, or occupational therapy, then there's a HIPAA issue. Or if the school has arrangements with an actual clinic that is providing medical/health services to students. But most things like doctor's absence notes or even allergy action plans or school medication orders are not under HIPAA.\n\nIf the district has a health plan for employees that it administers, there's also a HIPAA issue there. \n\n#PowerSchool #databreach #incidentresponse #HIPAA #FERPA \n\nnostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq0k72v2h56j98750zjfuu92m206fh6p6latxmup869ym4espay6eqjqwz7x nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq07pxlft5l6zfk7cf2427an0e2yh4ecd56tlr9eswhndflxwsdfzs5rc4cm",
"sig": "be63ee04d72af23c462456e567abe07660005ed2f23384744acf529d35b44791cf95ef287882ed192752da3648b4e2edd37bf1361f3a89c619627a8799d12c9f"
}