FERPA and HIPAA Practice Test

Under FERPA (Family Educational Rights and Privacy Act), it is crucial to obtain written consent from the student before disclosing their educational records to third parties. This requirement is designed to protect the privacy and confidentiality of students' educational records. Written consent must be explicit and indicate what information can be disclosed, to whom, and for what purpose.

This requirement ensures that students have control over their personal information and can make informed decisions about who has access to their records. Only specific exceptions to the written consent requirement exist, such as disclosures to school officials with legitimate educational interests, or in accordance with legal obligations, but these exceptions do not negate the fundamental principle of student control over their educational records.