[bijowo1676]

educational LMS should not store real patient health data, so thats the problem of whoever designed that system.

[erikerikson]

The question was whether the same transitive responsibility applies to FERPA, not whether HIPAA data is involved.