FERPA and HIPAA have different requirements ... unless there is a court order barring such disclosure. The dad should sign an authorization form, authorizing the release of the child's records to him ...
and HIPAA consent forms - as well as personally identifiable information such as full names, addresses, and phone numbers. Some files, labelled ‘site audit reports’, contained images of the ...