I don't know if HIPAA helps in this situation. FERPA absolutely should apply. I have never heard of a school hiding results. Is it a public school or private?