Privacy Law and Data Protection

Lauren B. Steinfeld serves as a Lecturer in Law at the University of Pennsylvania, where she also holds the position of Chief Privacy Officer for Penn Medicine. In her role, she leads the HIPAA compliance program and oversees various privacy initiatives across Penn's hospitals and physician practices. Steinfeld has been instrumental in developing an institution-wide privacy program within higher education, establishing policies and risk assessment models to safeguard personal information. Her expertise encompasses a wide range of privacy-related issues, including cloud computing, social media, and compliance with FERPA and HIPAA regulations.Before her tenure at Penn, Ms. Steinfeld worked at the Office of Management and Budget (OMB), where she contributed to the development of HIPAA medical privacy regulations during the Clinton Administration. She has also advised on various privacy matters, including identity theft and cybersecurity. At Penn Law, she teaches courses such as "Privacy Law and Data Protection" and "Effective Compliance Programs," sharing her extensive knowledge of compliance frameworks and privacy law with students. With a B.A. from the University of Pennsylvania and a J.D. from New York University School of Law, Lauren Steinfeld combines academic rigor with practical experience in the field of privacy law