CBS in Denver reports that a suitcase containing a thumb drive with approximately 100 students’ unencrypted medical information was stolen from a school nurse’s car on October 5. The car had been left in a parking lot.
The drive reportedly contained confidential health information for students from Eagleton, Castro and Munroe Schools. That information included medications, health-related letters and medical histories.
And of course, this would be covered by FERPA, not HIPAA.
This is not the first time we’ve seen student health info stolen from a school nurse’s or employee’s unattended vehicle. And this is going to keep happening until the federal government or states really crack down and impose meaningful consequences on districts that do not have policies in place that they monitor and enforce to protect students’ personal information.