Information on health care received in US schools can become part of a child's educational record, which is not protected by HIPAA and is available to school officials and teachers without patient consent, according to a report in Pediatrics. Even sensitive data from health programs run by non-school entities in coordination with a school nurse, such as sexually transmitted infection tests, can wind up in educational records, which highlights the need for privacy protocols, study leader Patricia Elliott says.