The federal Health Insurance Portability and Accountability Act (HIPPA) is a law providing baseline privacy and security standards for medical information. Under HIPPA, any information that is created or received by any covered entity, such as schools, relating to physical or mental health condition, treatment provided, or payment for healthcare is covered by the Privacy Rule. The Privacy Rule applies to protected health information (PHI) which includes all individually identifiable health information that is transmitted in any format or medium. This includes paper, electronic, or oral.

Because student health information in education records is protected by FERPA, the HIPAA Privacy Rule excludes such information from its coverage.
For more information about HIPAA