Higher Education Privacy Intensive Day 2017

The Higher Education Privacy Intensive Day previously was called the Higher Education Privacy Conference (HEPC).  Now in its sixth year, this annual one-day event focuses on privacy and information management in higher education.  The event consists of a combination of speakers and smaller breakout discussion groups to foster interactivity and engagement.  Participants include higher education CIOs, security professionals, privacy professionals, compliance professionals, and general counsel.  Also participating are key individuals from industry, law firms, associations, and government regulatory agencies.  For information about the history of this event, see the HEPC page

We have changed the name of this event and added it as a pre-conference event to the Privacy+Security Forum because many participants wanted to attend both events, and holding these events together will make it possible for more people to participate in both. The Higher Education Privacy Intensive Day will be the same style and format as the HEPC. 

Intensive Day – Wednesday, Oct. 4, 2017

Intensive Days are all-day events that feature primarily small discussion groups among seasoned professionals. Intensive Days differ from workshops in that workshops are shorter and more introductory in nature.

Intensive Days are for seasoned professionals, and the discussion will be focused and advanced. Intensive Days are for deep dives into topics.

The Higher Education Privacy Intensive Day is a way to join your peers in a sophisticated series of discussions about cutting-edge issues involving privacy and security. There will be unparalleled interactivity. Most of the day will be spent in seminar-style discussion groups.

What is the Intensive Day?

It is a special all-day event — like a “seminar within a conference” — that will occur on Wednesday, Oct. 4, 2017, the day prior to the Privacy+Security Forum. They feature small group discussions among seasoned professionals. The conversations will be focused and advanced, with unparalleled interactivity. Intensive Days differ from Workshops in that Workshops are shorter and more introductory in nature.

George Washington University Marvin Center
800 21st Street Northwest
Washington, DC 20052


Daniel Solove

John Marshall Harlan Research Professor
George Washington University Law School

Tracy Mitrano
Tracy Mitrano

Mitrano & Associates LLP


Our chairs for the Higher Educations Privacy Intensive Day plan the event and determine the topics for discussion.

Schedule Higher Education Privacy Intensive Day

Breaks and lunches will be with everyone present on the pre-conference day, so if you have colleagues attending workshops or Intensive Days on other topics, you will have time to network with them.

7:30am – 9:00am Breakfast
9:00am – 10:15am Session 1

Plenary Session
New Privacy Challenges for Higher Education

Speaker panel:
Kathleen Styles, Privacy Officer for U.S. Department of Education
Joshua Beeman, Chief Information Security Officer, U. Pennsylvania
Lauren Steinfeld, Chief Privacy Officer, Penn Medicine at U. Pennsylvania
Matthew Dalton Chief Information Security Officer, U. Massachusetts, Amherst
Scott Schafer, University Privacy Officer, U. Pennsylvania

Moderated by: Tracy Mitrano

Our speakers will address three pressing topics for higher education:

1. International Data. Increasingly, schools are collecting and using data about people in foreign countries. How are schools planning to comply with the EU General Data Protection Regulation (GDPR) and other international privacy laws?

2. Office of Civil Rights Investigations. Many institutions are either threatened or faced with actions from the Office of Civil Rights for privacy violations, particularly in health care. What is the OCR landscape and how can your college or university avoid such a case?

3. Business Intelligence. With a market dominated by data analytics, no college or university can afford not to invest in institutional research and business intelligence. What do these areas entail and how does your institution plan for this important work while maintaining privacy regulatory compliance?

10:15am – 10:45am Break
10:45am – 12:00pm Session 2

Breakout Discussion
Building a Privacy Program and Dealing with Faculty

Discussion moderated by: Scott Schafer and Tracy Mitrano

How can privacy programs be built and grown at schools? How can the need for such a program be sold to the institution’s leadership? What are the best strategies for dealing with various stakeholders, especially faculty?

12:00pm – 1:30pm Lunch
1:30pm – 2:45pm Session 3

Breakout Discussion
Dealing with Office of Civil Rights Investigations

Discussion moderated by: Matthew Dalton and Tracy Mitrano

An Office of Civil Rights (OCR) action against a college or university is a monumental task from how to make the institutional decision to report a breach to how to settle a case. In this discussion, we will explore the lifecycle of such actions from reporting to finalizing a plan. What steps can institutions take to stay off the OCR radar?

2:45pm – 3:15pm Break
3:15pm – 4:30pm Session 4

Breakout Discussion
Cybersecurity and Dealing with Incidents

Discussion moderated by: Joshua Beeman and Tracy Mitrano

What are the special challenges of protecting the security of data in the higher education environment? How should institutions normalize compliance the various laws and regulatory regimes? What is the appropriate level of information sharing to further security goals? To what extent are privacy and security in congruence or tension? What measures should be undertaken to prepare for a privacy/security incident?


The Higher Education Privacy Intensive Day will be on Wednesday, October 4, 2017.  The Privacy+Security Forum will be on Thursday, October 5, 2017 and Friday, October 6, 2017.  The fee for participating in the Higher Education Privacy Intensive Day is separate from the fee to participate in the Forum.You can register for the Higher Education Privacy Intensive Day independently from the main Privacy+Security Forum. Registration and fees are here.

Intensive Day Admission 2017

Early Bird

Before Aug 30, 2107

Full Price

After Aug 30, 2017

Intensive Day (price for each)




Intensive Day (price for each – academic/NGO/gov’t)