FSU should have hid behind HIPAA