Deven McGraw



Chief Regulatory Officer

Deven McGraw joined the HHS Office for Civil Rights (OCR) as the Deputy Director for Health Information Privacy on June 29, 2015. She is a well-respected expert on the HIPAA Rules, and comes to OCR with a wealth of experience in both the private sector and the non-profit advocacy world. 

Prior to joining OCR, she was a partner in the healthcare practice of Manatt, Phelps & Phillips, LLP.  

She previously served as the Director of the Health Privacy Project at the Center for Democracy & Technology, which is a leading consumer voice on health privacy and security policy issues, and as the Chief Operating Officer at the National Partnership for Women & Families, where she provided strategic leadership and substantive policy expertise for the Partnership’s health policy agenda.  

Ms. McGraw spearheads OCR’s policy, enforcement, and outreach efforts on the HIPAA Privacy, Security, and Breach Notification Rules; as well as lead OCR’s work on Presidential and Departmental priorities on health privacy and security.  

Ms. McGraw graduated magna cum laude from the University of Maryland. 

She earned her J.D., magna cum laude, and her L.L.M. from Georgetown University Law Center and was Executive Editor of the Georgetown Law Journal. 

She has a Master of Public Health from Johns Hopkins School of Hygiene and Public Health.


Contributions by Deven McGraw

  • The CARIN Trust Framework: Enabling Consumer Access to Health Information
    Speaker at Global Privacy Summit 2019
  • Emerging Privacy Solutions for Genomic Data
    Speaker at Global Privacy Summit 2019
  • Understanding the CCPA
    Forum Speaker at Global Privacy Summit 2019
  • CCPA On the Ground: Explore Case Studies in Ad Tech, Smart Cars, Health, Finance
    Speaker at IAPP CCPA Comprehensive 2019
  • What’s Pseudonymization and How Do You Do It?
    Speaker at Practical Privacy Series 2016
  • The Changing Face of Healthcare Privacy
    Speaker at Global Privacy Summit 2016
  • FTC: Dictator? Collaborator? Facilitator?
    Speaker at Practical Privacy Series 2015