Deputy Director for Health Information Privacy
U.S. Department of Health & Human Services
Sue McAndrew is the deputy director for Health Information Privacy (HIP), Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS). As deputy director, McAndrew has responsibility for implementing and enforcing the Privacy Rule issued pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA). McAndrew has worked primarily on the HIPAA Privacy Rule for HHS since May 2000 and is the senior advisor to Winston Wilkinson, Director of OCR on HIPAA Privacy Rule matters. In addition to the HIPAA Privacy Rule, in 2006, the secretary delegated to OCR the responsibility for enforcement of the confidentiality protections for patient safety work product under the Patient Safety and Quality Improvement Act of 2005, and the HIP Division will also lead this new enforcement effort.
McAndrew has over 20 years of federal government experience. She received her JD from Georgetown University Law Center and, prior to joining HHS, practiced law in the District of Columbia, including 12 years at Wilmer, Cutler & Pickering (now WilmerHale).