Governance
Last updated on February 27, 2023
ON THIS PAGE:
Overview
The Privacy Office collaborates with governance groups for additional insights and expertise from individuals representing various University stakeholders.
UW Privacy Steering Committee
The Privacy Steering Committee is an ongoing committee, charged to help uphold the UW values, establish privacy principles, and guide the strategic decisions about the purpose and use of personal data at the UW.
UW Privacy Steering Committee Charge Letter
Comprehensive Scope and Charge
The scope of the Privacy Steering Committee, inclusive of the UW’s academic, research, and business needs at all UW locations, includes:
- Assessing privacy-related risks and generating ideas for managing risks.
- Advising on initiatives that are most essential to improve the UW’s culture of privacy and governance of personal data.
- Vetting UW privacy or privacy-related policies, standards, guidelines, and best practices, prior to final approval.
- Evaluating incident and data breach trends to identify systemic issues that the UW may need to address.
- Refining a privacy strategy that balances and reflects: the risk, harm and privacy rights associated with personal data; ethical considerations; legal obligations; and opportunities afforded by evolving technology and data analysis.
Current Members
| Member | Title |
|---|---|
| Ann Nagel | University Privacy Officer and Associate Vice Provost, Academic and Student Affairs (Chair) |
| Michael Visaya | Assistant Vice President, Information Management, University Advancement |
| Ryan Calo | Lane Powell and D. Wayne Gittinger Professor, School of Law; Adjunct Associate Professor, Information School; Adjunct Professor, Paul G. Allen School of Computer Science and Engineering; and Faculty Co-Director, Tech Policy Lab and Center for an Informed Public |
| Beth DeLair | Chief Compliance Officer, UW Medicine; and Associate Vice President for Medical Affairs, School of Medicine |
| Rachel Gatlin | Assistant Vice President, Benefits, HR Benefits, Analytics and Information Systems, Human Resources |
| Joe Giffels | Senior Associate Vice Provost for Research Administration and Integrity, Office of Research |
| Erin Guthrie | Assistant Vice Provost, University Analytics and Institutional Research, Office of Planning and Budgeting |
| Jason Johnson | Senior Associate Dean and Associate Vice Provost, Undergraduate Academic Affairs; and Affiliate Assistant Professor, College of Education |
| Shelley Kostrinsky | Assistant Vice Provost for Academic Personnel, Academic Personnel |
| Stephen Majeski | Associate Dean for Research Administration and Infrastructure, College of Arts and Sciences; Professor, Political Science |
| Simon Neame | Dean of University Libraries, University Libraries |
| Jan Whittington | Associate Professor, Urban Design and Planning, College of Built Environments; Director, Urban Infrastructure Lab; Associate Director, Center for Information Assurance and Cybersecurity; and Affiliate Faculty, Tech Policy Lab |
UW Personal Data Processing Task Force
The Personal Data Processing Task Force, active from December 2020 to November 2021, helped develop the processes, templates, and tools to operationalize UW’s privacy practices, specifically the data inventory.
UW Personal Data Processing Task Force Charge Letter
Comprehensive Scope and Charge
The scope of the Personal Data Processing Task Force includes all the locations and all personal data other than data that is solely and uniquely HIPAA-protected health information. The Privacy Office has engaged consultants to help with certain aspects of this effort. The Task Force reported to the Privacy Steering Committee and the members were charged with working with the consultants, where appropriate, to address the following:
- Refine existing or document new resources that describe at a high-level the data lifecycles for specific data domains that involve personal data.
- Refine existing or document new resources that describe at a high-level the business processes that relate to the data lifecycles.
- Identify, within the software as a service (SAAS) solution, the common types of personal data collected, received, or created by UW in connection with the high-level business processes.
- Identify and confirm roles and responsibilities, summarized on the RACI for inventorying, mapping, and assessing personal data processing activities.
- Review, and help ensure that templates and workflow processes for inventorying, mapping, and assessing privacy impacts of personal data processing are efficient, effective, and user-friendly.
- Develop cohesive templates and workflow processes for centralizing, documenting and assessing data requests that are sent to various departments for sharing personal data repositories for internal and external use (excluding public records requests).
- Review and, where needed, enhance materials provided by the consultants for helping UW accomplish the above activities.
Members
| Member | Title |
|---|---|
| Erin Guthrie | Assistant Vice Provost, University Analytics and Institutional Research, Office of Planning and Budgeting (co-chair) |
| Ann Nagel | Associate Vice Provost for Privacy, Privacy Office, Academic and Student Affairs (co-chair) |
| Ann Anderson | Associate Vice President, Enterprise Services, Finance |
| Glenna Chang | Associate Vice President, Student Life |
| Richard Fenger | Chief Data Strategist for Research, Information Service, Office of Research |
| Helen Garrett | University Registrar, Enrollment Management, Academic and Student Affairs |
| Rachel Gatlin | Executive Director, Benefits, HR Benefits, Analytics and Information Systems, Human Resources |
| Andrew Gorohoff | Interim Director of IT, Graduate School |
| Laurie Halvorson | Director, Chief Business Office, Administration and Finance, School of Medicine |
| Christy Long | Assistant Vice Chancellor for IT and Chief Information Officer, UW Bothell |
| Jason Malone | Assistant Director of Regulatory Affairs, Human Subjects Division, Office of Research |
| Lenny Sanchez | Director, UW Medicine Compliance |
| Michael Visaya | Assistant Vice President for Information Management, Advancement Services |
| Jacob Morris | Enterprise Business Architect, UW-IT (ex-officio) |
| Nancy Garland | Assistant Attorney General, UW Division of the Attorney General’s Office (ex-officio) |
| Kerry Kuenzi | Privacy Analyst, Privacy Office, Academic and Student Affairs (ex-officio) |