{"id":28,"date":"2026-03-25T11:10:56","date_gmt":"2026-03-25T11:10:56","guid":{"rendered":"https:\/\/vendor.hub.wp.nau.edu\/hipaa\/hipaa-federal-regulations\/"},"modified":"2026-05-12T17:49:15","modified_gmt":"2026-05-12T17:49:15","slug":"hipaa-ferpa","status":"publish","type":"page","link":"https:\/\/in.nau.edu\/hipaa\/hipaa-ferpa\/","title":{"rendered":"HIPAA and FERPA"},"content":{"rendered":"

\n

\n
<\/p>\n

\n

\n
\n

Contact the HIPAA Privacy Program<\/h3>\n <\/div>\n
\n \n
\n <\/i>\n Email:<\/span>\n <\/div>\n
hipaa​@nau.edu<\/div>\n <\/a>\n \n
\n <\/i>\n Call:<\/span>\n <\/div>\n
928-523-7906<\/div>\n <\/a>\n <\/div>\n<\/div>\n\n<\/span><\/p>\n

<\/div>\n<\/div>\n<\/span><\/p>\n

HIPAA & FERPA<\/h1>\n

The U.S. Department of Education and the Office for Civil Rights at the U.S. Department of Health and Human Services published<\/a> joint guidance addressing the application of the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule to health records maintained on students.<\/p>\n

For colleges and universities, FERPA\u2014not HIPAA\u2014<\/strong>governs most student health records.<\/p>\n

This is because health and counseling records maintained by a postsecondary institution for its own students are considered education records or treatment records under FERPA. The HIPAA Privacy Rule explicitly excludes education records from its definition of PHI.<\/p>\n\n

\n

\n