Deven McGraw is the Chief Regulatory Officer for Ciitizen, a consumer health technology start-up. Prior to joining Ciitizen, she directed U.S. health privacy and security through her roles as Deputy Director, Health Information Privacy at the HHS Office for Civil Rights (the office that oversees HIPAA policy development and enforcement) and Chief Privacy Officer (Acting) of the Office of the National Coordinator for Health IT. Widely recognized for her expertise in health privacy and security, she directed the Health Privacy Project at the Center for Democracy & Technology (a nonprofit civil liberties organization) for six years and led the privacy and security policy work for the HITECH Health IT Policy Committee.