About the IAPP

Tessa Lucey, MHA, CHC, CHCP is the Director of Compliance Services and Chief Privacy Officer for the University of Vermont where she is responsible for the implementation and oversight of the University’s Compliance and Ethics Program and its Privacy Program. Prior to joining UVM, Lucey was the first Chief Privacy Officer at Kessler Institute for Rehabilitation in West Orange, NJ. There, she helped build the first HIPAA privacy program from the ground up. She then held CPO positions at South Shore Hospital and Hallmark Health System in Massachusetts. Lucey also owned and operated her own consulting business where she provided outsourced compliance and HIPAA privacy and security program services to healthcare organizations. Lucey has over 17 years experience with the development, implementation, training and oversight of privacy programs. She is a graduate of Westfield State University and obtained her Masters of Healthcare Administration from Simmons College in Boston. Lucey is certified in both health care compliance (CHC) and privacy (CHPC) through the Society of Corporate Compliance and Ethics.