Lydia Payne-Johnson

Headshot

The George Washington University

Director, IT Security, Identity Management and Risk

Lydia Payne-Johnson is Freddie Mac’s Chief Privacy Officer. She leads a team responsible for the enterprise privacy program including corporate policies, standards, controls, training and awareness, testing and monitoring, data classification, incident response and interfacing with regulators. 



Lydia joined Freddie Mac in March 2011. During her tenure, she has put in place a strong privacy risk and controls framework as the foundation of the enterprise privacy program. She has also played a crucial role in defining the privacy policy, establishing business-level Privacy Champions and implementing standards and requirements that are in line with US laws, regulations and industry leading practices.  In addition, Lydia’s privacy team have played a critical role in the company to raise the organization’s privacy stewardship by increasing awareness through mandatory training, developing risk-based privacy and security measures, maturing data loss monitoring, implementing privacy impact assessments and performing advisory services. Further, Lydia has led a successful cross-functional, multi-year initiative around database encryption and end user data masking, partnering with IT, Information Security and key stakeholders.



Prior to joining Freddie Mac, she was a CPO in the financial services and healthcare industries having worked in that role at Morgan Stanley, Verispan and CIT Group. In addition, she was a Manager in the Risk and Governance Practice at PricewaterhouseCoopers’ New York office. Prior to her work in data privacy, she spent 18 years as SVP, Director of Global Advertising with Morgan Stanley Dean Witter.



Ms. Payne-Johnson holds a B.A. in Music from Hunter College and a J.D. from New York Law School. She also earned a certificate from the Wharton School of Business Securities Industry Institute. Lydia is a Certified Information Privacy Professional (CIPP) and has co-authored numerous articles on privacy and data protection.