I’m almost sure this was also illegal. Wouldn’t it violate HIPPA? Your medical records are confidential, and without your express permission I doubt that even your children have a right to know what medications you are taking, much less their school teachers.
A child’s health teacher doesn’t need to know if the child’s mother takes Valtrex for herpes, or if Dad takes something for colitis.
HIPAA was crafted to tighten regulations on health-care providers. Patient information was deemed private. Regulations were put in place to make sure it stayed that way.
Now, were there clauses in there that addressed the private sector? I don’t honestly know.
What this person did was a major invasion of privacy. Is it covered under HIPAA? Maybe. I wouldn’t assume yes.
HIPPA applies to medical providers and their vendors. As written it wouldn’t help because the school would fall between those definitions. However there are state privacy laws this would run across. Trouble is the data was provided voluntarily.