I have worked in Healthcare for many years. FERPA is similar to HIPAA in the dental office. You do not talk to others about a patients information the same as you would not talk to others about a students grades or information. If there is documentation that it is ok to disclose information, then it can be discussed to only that person with the proper documentation.