http://nces.ed.gov/ipeds/
Offices must comply with the Health Insurance Portability & Accountability Act (HIPAA) in protecting the privacy of personal health information of students and employees. A major purpose of the HIPAA Privacy Rule is to define and limit the circumstances in which an individual's protected health information may be used or disclosed by involved entities. Additional information can be found at the following web site:
http://www.hhs.gov/ocr/hipaa/