Privacy Policy

Effective Date: September 9, 2026

HOSA, Inc. (“HOSA,” “we,” “us,” or “our”) is a nonprofit organization dedicated to supporting career and technical education and student leadership development.

This Privacy Notice explains how HOSA collects, uses, shares, and protects personal information through its websites, programs, events, platforms, and related services (collectively, the “Services”).

HOSA frequently works in partnership with middle schools, secondary schools, postsecondary and collegiate institutions, and school districts to deliver student leadership development to students exploring or interested in pursuing a career in the health professions.

HOSA collects most information directly from students, advisors, and members through chapter membership and educational program enrollment. In many cases, this information is not part of a school’s education records, and HOSA acts as an independent nonprofit rather than as a school’s technology vendor. Where HOSA does provide Services at the direction of or in coordination with a school or district, HOSA’s handling of student information is intended to align with widely adopted student data privacy expectations, including those commonly reflected in student data privacy agreements.

Where a school district or other local education agency is required by applicable law to have a student data privacy agreement in place, HOSA is prepared to work with that district to execute a tailored agreement that accurately reflects HOSA’s data privacy practices.

This Privacy Notice is a public disclosure of HOSA’s general data practices. Where a separate written agreement applies between HOSA and a school or district, that agreement governs in the event of any conflict.

Section 1. Scope, Roles, and Organizational Context

This Privacy Notice applies to personal information collected by HOSA, Inc. through the Services that link to or reference this Notice. It does not apply to third‑party websites, platforms, or tools that HOSA does not operate or control.

HOSA operates through HOSA, Inc. HOSA‑affiliated chartered associations (which may be organized at the state, national, or international level, including outside the United States) and local chapters may be separately organized entities that conduct local programs, events, or activities in coordination with and in support of classroom instruction.

HOSA membership is generally offered through school or program-affiliated chapters as part of an instructional program, and is generally not offered as stand-alone individual memberships. The exceptions are for alumni, professional, and honorary life members, whose memberships are both available at the chapter level if enabled by the chartered association or directly by HOSA.

If you interact with a HOSA chartered association or chapter outside the United States, your information may be handled under that association’s separate practices and under the laws of the applicable jurisdiction.

This Privacy Notice describes the privacy practices of HOSA, Inc. only. Chartered associations and local chapters may be separately organized entities responsible for their own programs, systems, websites, and independent uses of personal information. This Notice applies when HOSA, Inc. collects or processes information through an HOSA-operated Service. When a chartered association or chapter receives information from an HOSA-operated Service for its own administration or programs, that association or chapter is responsible for its independent use of the information, subject to applicable law, HOSA requirements, and any governing agreement.

HOSA uses and maintains student information only as reasonably necessary to administer the applicable program or event and in a manner intended to align with school expectations and applicable student privacy laws.

Section 2. Key Privacy Commitments

HOSA is committed to protecting personal information and, where applicable, handling student information in a manner consistent with school and district expectations. Our core privacy commitments include the following:

Use Limitation

We use personal information, including student information, only for purposes related to operating, administering, and improving our nonprofit educational programs, events, and Services.

No Sale or Behavioral Advertising

HOSA does not sell or rent student information as a standalone commercial product or provide student information to third parties for their independent behavioral advertising or commercial profiling. HOSA may provide communications about mission-aligned educational, career, scholarship, certification, and similar opportunities and may carry out participant-directed disclosures as described in this Privacy Notice.

School Collaboration and Control

When HOSA provides Services in coordination with a school or school district, student information is used only for authorized educational purposes and in a manner intended to support the school’s obligations under applicable student privacy laws.

Vendor and Service Provider Protections

HOSA uses service providers to support hosting, storage, backup, communications, registration, payment, event administration, and other operational functions. HOSA selects providers whose services and published or contractual data-handling and security terms are reasonably compatible with HOSA’s needs. Service providers may access personal information only as reasonably necessary to provide the applicable service, subject to their agreements and applicable law.

Security Safeguards

Breach Response

If HOSA becomes aware of a suspected or confirmed security incident involving personal information, HOSA will evaluate the incident, take reasonable steps to contain and address it, and provide notifications or cooperation as required by applicable law or agreement.

Retention and Disposal

We retain information as described in Section 10 (Data Retention and Disposal), including longer‑term retention of alumni, historical, and de‑identified data.

Section 3. Information We Collect

Information Provided Directly

HOSA may collect information that individuals, advisors, schools, or chapters provide, including participant and advisor information such as name, email address, mailing address, phone number, school or chapter affiliation, role (for example, student or advisor), grade level or membership division, and demographic information.

We may also collect program‑ and event‑related information, such as registrations, eligibility confirmations, schedules, submissions, scores or results (where applicable), and information related to recognition or awards. If a transaction is involved, we may receive payment‑related information associated with the transaction; however, payment card information is typically processed and stored by our third‑party payment processors rather than by HOSA directly.

In addition, we collect information included in communications with HOSA, such as emails, support inquiries, survey responses, or other information individuals choose to provide.

Student Information Provided Through Schools

Many HOSA programs are offered in coordination with middle schools, secondary schools, postsecondary or collegiate institutions, or school districts. In those contexts, student information may be provided to HOSA by or through a school, chapter, advisor, student, or parent for a defined educational or program purpose.

This information may include student name and school or chapter affiliation, grade level or eligibility indicators, demographic information, participation records, and event-related submissions, scores, or results where applicable.

HOSA uses student information provided through schools only as reasonably necessary to administer the relevant program or event and in a manner intended to align with reasonable school and district expectations regarding student privacy.

Student‑Generated Content

Certain HOSA programs or competitions may allow students to create or submit content, such as written materials, images, videos, or other work products, as part of participation in the classroom or chapter activity.

Student‑generated content is used solely for program administration, evaluation, recognition, and related educational purposes.

HOSA may evaluate or use automated or AI-assisted tools to support program administration and the evaluation of competition materials consistent with HOSA’s educational mission. Any use of student-generated content for the development or training of such tools will be subject to applicable law, governing agreements, participant authorizations, and appropriate vendor restrictions. HOSA does not sell student-generated content or use it for behavioral advertising or commercial profiling.

Information Collected Automatically

When users interact with HOSA’s online Services, we may automatically collect limited technical information, such as Internet Protocol (IP) address, device type, browser type, operating system, date and time of access, and pages or features accessed.

This information is used for security, operational, and performance purposes and is not used for targeted advertising.

Cookies and Similar Technologies

HOSA uses cookies and similar technologies to maintain sessions and user preferences, support site functionality, and understand aggregate usage of the Services.

Users may manage cookie settings through their browser. Disabling cookies may affect certain features of the Services. Services beyond browsing the public website, including logged‑in applications like apps.hosa.org, will not function properly without cookies.

Section 4. How We Use Information

HOSA uses personal information, including student information where applicable, to operate and support HOSA’s nonprofit educational mission and the Services described in this Privacy Notice.

HOSA uses information to administer programs, events, competitions, and related activities; verify eligibility, participation, and completion of program requirements; communicate with participants, advisors, schools, chapters, and families regarding program logistics, deadlines, opportunities, and outcomes; evaluate submissions; determine results; administer recognition and awards; and maintain the integrity, functionality, and security of the Services.

HOSA may communicate with participants about educational programs, scholarships, internships, career pathways, postsecondary opportunities, professional associations, certifications, test preparation, and other resources offered by HOSA or its partners that HOSA believes may support its educational mission. These communications may be tailored based on a participant’s membership category, location, eligibility, program participation, competition area, or expressed interests. HOSA does not use student information to create commercial profiles or to deliver behavioral advertising unrelated to HOSA’s educational mission.

At in-person events, HOSA may offer exhibitors, sponsors, and partners the ability to receive contact information from participants who affirmatively choose to share it. For example, a participant may authorize a particular exhibitor to receive the participant’s contact information by presenting or allowing the exhibitor to scan the participant’s event badge. HOSA does not provide exhibitors with unrestricted access to participant or membership lists through this process. Information is shared only with the exhibitor selected by the participant, and the exhibitor’s subsequent use of that information is governed by the exhibitor’s own privacy practices.

HOSA may receive sponsorship, exhibitor, or other event-related revenue in connection with these opportunities. Such revenue is for participation in, visibility at, or functionality associated with HOSA programs and events and is not payment for unrestricted access to student information.

HOSA does not sell or rent student information as a standalone commercial product, provide student information to third parties for their independent behavioral advertising or commercial profiling, or use student information for purposes unrelated to HOSA’s educational or nonprofit mission. This limitation does not prevent HOSA from providing mission-related communications or from carrying out a participant-directed disclosure as described above.

Section 5. How We Share Information

HOSA shares personal information only as described below. HOSA does not sell or rent student information as a standalone commercial product or provide unrestricted participant or membership lists to third parties for their independent behavioral advertising or commercial profiling.

Sharing for Program Administration. HOSA may share information with authorized school personnel, advisors, judges, event staff, partners, sponsors, or volunteers solely as necessary to administer and support HOSA programs and events. This may include sharing information to verify eligibility and participation, administer competitions or events, evaluate submissions and determine results, and communicate outcomes, recognition, or awards. Such sharing is limited to individuals with a legitimate program‑related role and occurs in a manner intended to align with reasonable school and district expectations.
Chapter and Advisor Access. Authorized chapter advisors and other approved school or chapter representatives may access information associated with their chapter through HOSA-operated Services for legitimate chapter administration, membership, program participation, and related educational purposes. HOSA uses role-based access controls designed to limit these users to the information and functions associated with their authorized role and chapter. Schools and chapters are responsible for identifying their authorized representatives and notifying HOSA when access should be changed or removed.
Service Providers and Vendors. HOSA uses service providers to support hosting, storage, backup, communications, membership and event registration, conference housing and transportation, payment processing, analytics, customer support, and other operational functions. HOSA selects providers whose services and published or contractual data-handling and security terms are reasonably compatible with HOSA’s needs. A provider may access personal information only as reasonably necessary to perform the applicable service, subject to its agreement and applicable law. HOSA describes providers by category rather than by name so that this Notice remains accurate as specific providers change.
Recognition and Public Results. In connection with HOSA’s mission, we may publicly share limited information related to participation, achievements, or recognition, such as names, school or chapter affiliation, placement, or awards. Any public recognition is limited to what is appropriate for the nature of the program or event. Where public scheduling or location‑based information could identify where a specific student will be at a specific time, HOSA limits the identifying detail disclosed (for example, by using initials or competitor identification number) or restricts access to authenticated participants.
Photography, Video, and Audio. At HOSA conferences, competitions, and events, HOSA and its authorized representatives may capture photographs, video, broadcasts, and audio recordings for educational, recognition, informational, promotional, and historical purposes. Participants may submit a written request for exemption in accordance with applicable event registration materials or instructions.

HOSA may also invite a participant to appear in an educational, informational, or training feature with a partner or vendor. In those circumstances, HOSA seeks the participant’s approval and, where appropriate, approval from a parent or guardian before the final content is used or distributed.

HOSA does not use participant images for behavioral advertising or commercial profiling. Requests regarding the use of a participant’s image may be directed to the contact information in this Notice

Participant-Authorized Connections. HOSA may disclose limited contact or participation information when a participant, or the participant’s parent or guardian where appropriate, requests or authorizes HOSA to facilitate a specific opportunity or connection. Examples may include connecting a member with an organization providing a donation or benefit to that member or connecting a member with a partner participating in an approved educational or informational feature. HOSA limits the information disclosed to what is reasonably necessary for the authorized purpose.
Legal, Safety, and Organizational Disclosures. HOSA may disclose information where required to comply with applicable law, regulation, or legal process, or where necessary to protect the rights, safety, or property of participants, schools, HOSA, or others, or to investigate or prevent fraud, security incidents, or misuse of the Services. Where student information is involved and legally permitted, HOSA will seek to provide advance notice to the relevant school or district before responding to a compelled disclosure. In the event of a merger, reorganization, dissolution, or similar organizational change, information may be transferred as part of that transaction, subject to appropriate confidentiality and privacy protections.

Section 6. De‑Identified and Aggregated Data

HOSA may create and use de‑identified or aggregated information derived from personal information to support its nonprofit mission, improve programs and events, and better understand participation and outcomes.

De‑identified or aggregated data is processed so that it does not identify an individual student or participant, either directly or reasonably indirectly, and cannot reasonably be linked back to a specific person.

HOSA may use this information for purposes such as evaluating program effectiveness, identifying participation trends, improving program design, accessibility, or administration, and producing high‑level reports or impact summaries consistent with its educational mission.

HOSA does not attempt to re-identify de-identified data and does not authorize service providers or recipients to do so, except where required by law or expressly authorized through a written agreement with a school or district.

De‑identified or aggregated data may be shared with partners, sponsors, or stakeholders only in a form that does not identify individual students or participants and is not used for targeted advertising or commercial profiling.

Such data may be retained beyond the completion of a specific program or event for reporting, analytical, or historical purposes, while identifiable personal or student‑level data is retained and disposed of as described elsewhere in this Privacy Notice and any applicable agreement.

Section 7. Data Security and Breach Response

HOSA implements and maintains reasonable security measures designed to protect personal information from unauthorized access, use, modification, destruction, or disclosure. These measures are selected based on the nature of the information, the systems involved, HOSA’s operations and resources, and applicable legal and contractual requirements.

HOSA requires authentication for access to nonpublic systems and uses access controls designed to limit access based on a user’s role and responsibilities. HOSA also relies on cloud hosting, backup, and other technology providers that maintain security controls for the infrastructure and services they provide.

No system can be guaranteed to be completely secure. HOSA works to identify and address security and access-control issues as they arise and updates its systems and practices where reasonably appropriate.

Security Incidents. If HOSA becomes aware of a suspected or confirmed security incident involving personal information, HOSA will evaluate the incident, take reasonable steps to contain and address it, and provide notifications or cooperation as required by applicable law or agreement.

Section 8. Children, Age, and Consent Considerations

HOSA programs are designed to support middle school, secondary, and postsecondary/collegiate students, and school‑affiliated activities. HOSA recognizes that many participants are minors and takes additional care when handling information relating to children.

School‑Authorized Participation. Many HOSA Services are accessed by students through their school, advisor, or a school‑sponsored activity. In those contexts, student information is provided to HOSA for educational purposes authorized by the school or school district. Where HOSA receives student information through a school or district, the collection and use of that information is intended to align with applicable student privacy laws and with school expectations regarding parental notice, consent, and oversight.
Children Under the Age of 13. HOSA does not knowingly permit children under the age of 13 to independently create open accounts for the Services without appropriate authorization. Where a child under 13 participates through a school, chapter, or advisor, HOSA limits its collection and use of information to what is reasonably necessary to administer the applicable program or activity. If HOSA becomes aware that it collected personal information from a child under 13 outside an authorized participation context, HOSA will review the circumstances and take appropriate corrective action.
Advisor and School Roles. Advisors and school officials commonly serve as points of coordination for student participation in HOSA programs and activities. Where appropriate, HOSA communicates program requirements, deadlines, and results through these authorized adults. HOSA does not ask students to provide personal information beyond what is reasonably necessary to participate in a program or event.
No Behavioral Advertising to Students. HOSA does not use student information to deliver behavioral advertising or create commercial marketing profiles. HOSA may communicate with students regarding HOSA programs and activities and may provide mission-aligned educational, career, scholarship, certification, and similar resources offered by HOSA or its partners, as described in Section 4.

Section 9. Access, Correction, and Requests

Requests in a School or School District Context

Where HOSA maintains student information on behalf of a school or district under a governing agreement, requests to access, review, correct, or delete that information generally should be directed to the applicable school or district.

HOSA will reasonably cooperate with the school or district in responding to those requests. Where HOSA collected and maintains information independently, HOSA will address the request consistent with applicable law, any governing agreement, and HOSA’s practices

Certain HOSA systems allow students to self‑enter program activities (such as volunteer hours or community service) for recognition purposes. Information provided through such systems is subject to this Privacy Notice

Requests Outside a School Context

Individuals who interact directly with HOSA outside a school or school district context may contact HOSA using the information provided in this Privacy Notice to request access to or correction of their personal information, subject to applicable law and operational limitations.

HOSA’s ability to honor such requests may be limited where information is maintained for nonprofit, programmatic, historical, legal, or compliance purposes.

Requests From Alumni, Professionals, and Honorary Life Members

HOSA may maintain personal information about professional members, honorary life members, and former members for alumni engagement, historical, recognition, development, and related nonprofit purposes. Alumni, Professional, and Honorary Life Members may contact HOSA using the information provided in this Privacy Notice to request access to or correction of personal information maintained directly by HOSA or to opt out of non-essential communications.

HOSA will consider requests consistent with applicable law and HOSA’s legitimate nonprofit, programmatic, historical, legal, and compliance needs. HOSA may retain information where reasonably necessary for those purposes, including historical participation and recognition records.

Section 10. Data Retention and Disposal

HOSA retains personal information for as long as reasonably necessary to fulfill the purposes described in this Notice and may retain certain alumni, historical, recognition, and program-participation records on a longer-term or ongoing basis to support HOSA’s educational mission, alumni engagement, and historical reporting, subject to applicable law and any governing agreement. Information may persist in routine backups until those backups are rotated out in the ordinary course. When information is no longer needed, HOSA takes reasonable steps to delete or de-identify it, subject to applicable legal, contractual, archival, and operational requirements.

Section 11. Changes to This Privacy Notice

HOSA may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or organizational needs. Updates will be posted with a revised “Last Updated” date. Where changes materially affect school‑provided student information, HOSA may provide notice to affected schools or districts consistent with applicable agreements.

Contact Information

Questions or concerns regarding this Privacy Notice or HOSA’s data practices may be directed to:

HOSA, Inc.

Attn: Privacy Inquiries

Email: hosa@hosa.org

Mailing Address: 548 Silicon Drive, Suite 101, Southlake, TX 76092

Phone: 1-800-321-HOSA (4672)

Schools or school districts seeking to discuss student data privacy agreements, including execution of a Student Data Privacy Agreement or the National Data Privacy Agreement (NDPA), may use the contact information above.