2.3 Privacy, Confidentiality, Consent, and Mandated Reporting

Key Takeaways

  • Teachers in all fifty states are mandated reporters who must report reasonable suspicion of child abuse or neglect directly to the designated authority; the duty is personal and is not discharged by telling a supervisor.
  • Mandated reporters report reasonable suspicion, not proof -- investigating the allegation before reporting is itself a failure to comply.
  • FERPA governs education records and gives parents the right to inspect and to control disclosure, transferring to the student at age 18 or upon postsecondary enrollment; HIPAA generally does not apply to records FERPA covers.
  • The Protection of Pupil Rights Amendment (PPRA) requires parental notice and, for certain federally funded surveys, written consent before students are asked about protected areas including sexual behavior, mental health, and family religious or political beliefs.
  • A health educator must never promise a student unconditional confidentiality; reporting limits should be stated before a disclosure develops.
Last updated: August 2026

The Responsibility to Report

Every state designates school personnel as mandated reporters of suspected child abuse and neglect. Five features of that duty are tested repeatedly:

  1. The standard is reasonable suspicion, not certainty. You do not need proof, a confession, or corroboration. If a reasonable person in your position would suspect abuse or neglect, you report.
  2. Do not investigate. Interviewing the student to build a case, contacting the suspected person, or searching for physical evidence can contaminate a forensic investigation and delay protection. Gather only what the student volunteers, then report.
  3. The duty is personal and non-delegable. Telling the principal, counselor, or nurse does not satisfy it in most states. You may follow the district chain in addition to reporting, but the report to child protective services or law enforcement is yours to make.
  4. Report promptly, within the timeframe your state specifies -- commonly an immediate oral report followed by a written report within 24 to 48 hours.
  5. Good-faith reporters are granted immunity from civil and criminal liability in every state; failing to report carries penalties that can include misdemeanor charges and loss of licensure.

Handling the disclosure itself

When a student begins to disclose, the professionally sound response is to state the limits of confidentiality before the disclosure deepens: "Before you tell me more -- I want you to know that if someone is hurting you, I have to tell the people whose job it is to keep you safe. I won't tell anyone else." This is honest, it preserves trust better than a broken promise, and it protects the student.

Afterward: stay calm, do not express shock or anger about the alleged perpetrator, do not ask leading questions, thank the student for telling you, tell them clearly that it is not their fault, and document what the student said in their own words with the date and time.


FERPA: Education Records

The Family Educational Rights and Privacy Act governs personally identifiable information in education records at any institution receiving federal education funds.

FERPA elementRule
Who holds the rightsParents/guardians, until the student turns 18 or enrolls in a postsecondary institution, at which point rights transfer to the student (the eligible student)
Right to inspectParents may review the student's education records
Right to amendParents may request correction of inaccurate records and receive a hearing if refused
Right to control disclosureWritten consent required before disclosing personally identifiable information, with defined exceptions
Key exceptionsSchool officials with legitimate educational interest; transfer to another school; health or safety emergencies; certain judicial orders
Directory informationMay be released unless the parent opts out; the school must give annual notice of what it designates as directory information

Sole possession notes -- a teacher's private memory aids kept in their exclusive possession and shared with no one except a temporary substitute -- are not education records under FERPA. The moment such a note is shared with another staff member or placed in a file, it becomes an education record.

FERPA versus HIPAA

This contrast is a favorite item. HIPAA governs protected health information held by covered entities (health plans, clearinghouses, and health care providers who bill electronically). When a school nurse's health record is part of the student's education record, FERPA -- not HIPAA -- controls, because FERPA-covered records are expressly excluded from HIPAA's definition of protected health information. A school-based health clinic operated by an outside provider that bills electronically may be a HIPAA covered entity; the classroom teacher's records are not.


PPRA: Surveys and Protected Areas

The Protection of Pupil Rights Amendment matters directly to health educators because health surveys and needs assessments frequently touch protected areas. PPRA identifies eight protected topics:

  1. Political affiliations or beliefs of the student or family
  2. Mental or psychological problems of the student or family
  3. Sexual behavior or attitudes
  4. Illegal, antisocial, self-incriminating, or demeaning behavior
  5. Critical appraisals of others with whom the student has a close family relationship
  6. Legally recognized privileged relationships (lawyers, physicians, ministers)
  7. Religious practices, affiliations, or beliefs of the student or family
  8. Income, other than as required to determine program eligibility

Prior written parental consent is required for a survey touching these areas that is funded in whole or in part by the U.S. Department of Education. For surveys not so funded, districts must give parents notice and the opportunity to opt the student out, and must let parents inspect the instrument on request. Anonymous, voluntary administration -- the YRBSS model -- combined with advance parental notice is the standard practice.


Permission Forms and Opt-Outs

Many states allow or require parents to excuse a student from instruction on human sexuality or related topics. Sound practice:

  • Provide notice and a materials preview well before the unit
  • Use plain language, translated for the families in your school
  • Distinguish opt-out (student is excused; the default is participation) from opt-in (participation requires an affirmative signature); know which your state and district use
  • Prepare a meaningful alternative assignment, not study hall
  • Never single out or penalize an excused student

Field trips, off-campus service learning, and activities involving outside providers carry their own permission requirements, typically including emergency contact and medical information.


Professional Ethics

Beyond statute, health educators are bound by professional ethics: teach accurate, medically sound content; respect the diversity of student values while presenting evidence honestly; avoid self-disclosure that shifts the focus to the teacher; maintain appropriate boundaries in digital communication with students; and never use classroom access to promote a personal or commercial interest.


Common Praxis Traps

  • Trap 1: Investigating before reporting. Never. Reasonable suspicion triggers the report.
  • Trap 2: Reporting only to the principal. In most states this does not discharge the individual duty.
  • Trap 3: Applying HIPAA to classroom or school records. FERPA governs education records, including nurse records that are part of them.
  • Trap 4: Promising a student that a disclosure will stay private. State the limits first.
  • Trap 5: Assuming PPRA always requires signed consent. Written consent is required for surveys funded by the U.S. Department of Education; otherwise the requirement is notice plus opt-out.
Test Your Knowledge

A student tells a health teacher that a family member has been hitting them. The teacher's most appropriate immediate action is to:

A
B
C
D
Test Your Knowledge

A school nurse maintains immunization and health-screening records that are part of a student's education record. Which law governs disclosure of those records?

A
B
C
D
Test Your Knowledge

A health teacher plans to administer a needs-assessment survey funded by a U.S. Department of Education grant that includes items about students' sexual behavior and mental health. Under the Protection of Pupil Rights Amendment, what is required?

A
B
C
D
Test Your Knowledge

Which of the following is NOT considered an education record under FERPA?

A
B
C
D