HIPAA led to the establishment of a federal “floor” of privacy and security standards and pre-empts any existing healthcare-related privacy and security laws unless they have more stringent standards than HIPAA. Health information contained in educational records are protected by the Family Educational Rights and Privacy Act (FERPA) which has more stringent standards than HIPAA.