FERPA and HIPAA have different requirements, so simply complying with one regulation does ... unless there is a court order barring such disclosure. The dad should sign an authorization form, ...