Deven McGraw, JD, MPH

HITAC Member Terms:
Term 1: 1/2023 – 12/2025

Deven McGraw is the Chief Regulatory and Privacy Officer for Ciitizen, a platform for patients to gather and manage their health information, divested from Invitae in 2023 (Deven co-founded Ciitizen prior to its acquisition by Invitae in 2021.) From 2015-2017, she directed U.S. health privacy and security as Deputy Director, Health Information Privacy at the HHS Office for Civil Rights and Chief Privacy Officer (Acting) of the Office of the National Coordinator for Health IT. Widely recognized for her expertise in health privacy, she directed the Health Privacy Project at the Center for Democracy & Technology for six years, testifying before Congress on health privacy issues on multiple occasions and leading the privacy and security policy work for the HITECH Health IT Policy Committee. She also is currently serving on the following bodies: Health IT Advisory Committee (appointed by GAO); Data and Surveillance Workgroup of the CDC’s Advisory Committee to the Director on CDC’s Data Modernization; Board of Directors of Manifest MedEx, the largest health information exchange in California.; and the National Academy of Medicine Artificial Intelligence Code of Conduct Steering Committee. She previously was the Chief Operating Officer of the National Partnership for Women and Families and, before joining federal government service, advised health industry clients on HIPAA compliance and data governance while a partner at Manatt, Phelps & Phillips, LLP. Deven graduated magna cum laude from Georgetown University Law Center and has a Master of Public Health from Johns Hopkins University.