FERPA and HIPAA have different requirements ... unless there is a court order barring such disclosure. The dad should sign an authorization form, authorizing the release of the child's records to him ...

What you really need are legal documents more often associated with senior citizens than seniors in school: a living will, HIPAA authorization form, health care proxy and a general durable power ...