Documentation is the backbone of school-based speech-language pathology practice — but it's also the area where SLPs face the most legal exposure. Federal and state laws create a layered compliance landscape that can feel overwhelming. Understanding which laws apply, what they require, and where practitioners typically fall short is essential for every school SLP.
Which Laws Apply to School-Based SLPs?
School-based SLPs operate at the intersection of several federal frameworks. Understanding each one's scope is the starting point.
IDEA — Individuals with Disabilities Education Act
IDEA is the primary federal law governing special education services, including speech-language services in schools. It mandates that eligible students receive a Free Appropriate Public Education (FAPE) in the Least Restrictive Environment (LRE). For SLPs, IDEA compliance means following strict timelines for evaluation (typically 60 calendar days from consent), developing legally compliant IEPs, delivering services as written in the IEP, and documenting progress toward annual goals at the same intervals as report cards.
IDEA documentation obligations are extensive: the evaluation report, eligibility determination, IEP document, prior written notice, and session records must all be maintained and accessible to parents on request.
FERPA — Family Educational Rights and Privacy Act
FERPA governs education records for all students. In school-based SLP practice, FERPA controls who can access session notes, evaluation reports, and IEP documents. Key FERPA requirements include:
- Parents (or eligible students over 18) have the right to inspect and review education records
- Schools must respond to records requests within 45 days
- Personally identifiable information cannot be disclosed to outside parties without written consent, with limited exceptions
- Records must be protected from unauthorized access
Importantly, FERPA — not HIPAA — governs most school records, even those containing health information. However, the distinction matters: records created by a school nurse or outside medical provider that are maintained separately from education records may fall under HIPAA.
HIPAA — When It Applies (and When It Doesn't)
Most school-based SLPs work for FERPA-covered entities (schools and districts), so their records are governed by FERPA, not HIPAA. However, HIPAA applies in these school contexts:
- When an SLP is employed by a healthcare entity (like a hospital system that contracts with a school)
- When services are billed to private health insurance as a covered entity
- When Medicaid billing is conducted through a healthcare clearinghouse
When HIPAA does apply, Protected Health Information (PHI) must be safeguarded through administrative, physical, and technical controls. Using a HIPAA/FERPA-compliant platform like SLPDesk helps ensure your documentation infrastructure meets these requirements without requiring you to audit every vendor relationship manually.
Medicaid School-Based Services
Many districts bill Medicaid for speech-language services delivered to Medicaid-eligible students. Medicaid adds its own documentation layer on top of IDEA and FERPA requirements. Federal Medicaid rules require that services be medically necessary, delivered by qualified providers, and documented in accordance with the state's Medicaid plan. Most states require a plan of care, session notes for each billable encounter, and documentation of the student's functional communication needs.
IDEA Documentation Requirements in Detail
For every student on your caseload, IDEA requires documentation at four stages:
1. Evaluation
The evaluation report must document: the student's presenting concerns, standardized and non-standardized assessment results, the evaluator's interpretation of findings, the student's educational impact statement, and eligibility determination with rationale. Parent input must be solicited and documented. The report must be completed within the state's mandated timeline (60 days is common but states vary).
2. Eligibility
The eligibility determination documents the team's decision, the criteria applied, and the educational impact of the disability. If the team determines a student is not eligible, that decision must also be documented with rationale and parent notification (prior written notice).
3. IEP
The IEP is the central compliance document. Speech-language goals must be measurable, include a baseline, and specify the criteria for mastery, evaluation method, and review schedule. Present levels of academic achievement and functional performance (PLAAFP) must be current and directly inform each goal.
4. Service Delivery
Session documentation must verify that services were provided as written in the IEP — the right frequency, duration, and setting. Notes must capture the goals addressed, student performance data, and clinician observations. Missing sessions must be documented with a reason and, if services fall significantly short, a compensatory services plan may be required.
Medicaid Documentation Requirements
When billing Medicaid, documentation requirements become even more specific:
- Plan of care: Must establish medical necessity, identify functional goals, and be updated at required intervals (annually in most states, or when goals change significantly)
- Session notes: Must document the date, start and stop times, procedure code, goals addressed, techniques used, student response, and clinician signature with credentials
- Supervision documentation: If services are provided by an SLPA or CF under supervision, the supervising SLP's oversight must be documented per state requirements
- Credentials: Billing records must accurately reflect the provider's licensure status; billing under a supervisor's NPI for services you didn't supervise is fraud
Common Compliance Failures
Based on audit findings and IDEA due process complaints, the most frequent compliance problems for school SLPs are:
- Missing service delivery documentation: Sessions happened but notes weren't written, or notes don't document the specific goals addressed
- Non-measurable IEP goals: Goals that say "will improve articulation" without baseline, criteria, or measurement method
- Untimely evaluations: Exceeding the mandated timeline for completing initial evaluations or triennial re-evaluations
- Failure to notify parents: Making placement or service changes without prior written notice
- Inadequate progress reporting: Sending generic "making progress" updates rather than quantified data tied to IEP goals
- FERPA violations: Sharing student records with outside parties (including other agencies, even healthcare providers) without written consent
Records Retention Requirements
Federal law requires that education records be retained for at least three years after a student exits special education services. Many states have longer retention requirements — some require records to be kept until the student turns 25 or 30. Best practice is to retain records for the longer of: (a) your state's requirement, (b) three years post-exit, or (c) until the statute of limitations for potential IDEA claims has expired.
Records must be stored securely and destroyed in a confidentiality-preserving manner (shredding paper records, secure deletion of digital records). Parents must be notified when records are no longer needed and have the right to request their destruction — though districts should retain a basic summary of eligibility, services provided, and exit status permanently.
Parent Rights to Records
Under FERPA and IDEA, parents of students with disabilities have extensive rights regarding their child's records:
- The right to inspect and review all education records, including session notes and evaluation reports
- The right to request amendments to records they believe are inaccurate or misleading
- The right to a hearing if the school refuses to amend a record
- The right to consent before records are disclosed to most outside parties
- The right to receive copies of records (schools may charge a reasonable fee unless the fee would prevent access)
Practically, this means every session note, data sheet, and progress report you write is potentially a document a parent can request and review. Write accordingly — with the professionalism and accuracy you'd want reflected in any legal proceeding.
Building a Compliant Documentation System
Compliance is ultimately a systems problem, not just a knowledge problem. Even SLPs who understand the requirements can fall short when they're managing 50+ students with paper-based or fragmented digital systems. The key is to build documentation workflows that make compliant behavior the path of least resistance.
This means: using platforms designed for school-based SLP compliance, maintaining consistent session documentation habits, setting calendar reminders for evaluation timelines and progress reporting periods, and staying current on your state's specific Medicaid and IDEA implementation rules. The legal landscape for school-based SLPs won't simplify — but with the right systems, navigating it doesn't have to be a daily source of stress.