Microsoft Forms is HIPAA and BAA compliant.
Microsoft Forms data follows the standard Office 365 Compliance Framework (.pdf download) and belongs to compliance category C, as outlined in the Framework.
In addition, all FERPA and BAA protections are in place.