About the Office

Who We Are

Susan Blair,MSJ,MBA,CIPP,CIA: Chief Privacy Officer
Responsible for developing, implementing and enforcing policies and procedures for privacy and security of all personal information at the University of Florida.
sablair@ufl.edu (352) 273-5094

Mary Anne Norris,MIB,CIA: Privacy Auditor
Responsible for developing audit tools and for examining and analyzing the information privacy activities of the University of Florida.
manorris@ufl.edu (352) 273-5094

Everall Peele,MPH,RHIA,LHRM,CCS: Privacy Training Coordinator
Responsible for developing, implementing and monitoring privacy-related training programs at all levels.
epeele@ufl.edu (352) 273-5096

Caroel DeBose,MBA: Privacy Analyst
Responsible for developing, implementing and monitoring HIPAA-mandated projects for all affected UF workforce members.
cadebose@ufl.edu (352) 273-5092

Lisa Van Nocker: Administrative Assistant
Responsible for providing access to and monitoring the Online Disclosure Tracking System, and for maintaining the Privacy Incident Tracking Log.
lvan@ufl.edu (352) 273-5094


Office Location and Contact Info

The University Privacy Office is located on the 1st floor of the N-wing in the Medical Science Building. Room N1-008.

Phone: 352-273-5094
Toll-free (Hot-line): 866-876-HIPA
Fax: 352-392-6661
E-mail: privacy@ufl.edu


Our Mission

The mission of the Privacy Office is to ensure institutional compliance with federal and state privacy regulations, as well as industry standards, for restricted information; and to provide centralized resources, oversight and enforcement for privacy-related activities.

UF Privacy Organization Chart


Our Core Responsibilities

  1. To develop, implement, and maintain University privacy-focused policies, procedures and guidelines that comply with statutory mandates and industry regulations.
  2. To deliver privacy-related training and to oversee privacy program monitoring and enforcement as required by privacy statutes and standards.
  3. To serve as the central contact and investigation authority for privacy complaints, incidents, and breaches. To coordinate the privacy notifications when required.
  4. To evaluate opportunities to reduce privacy risks and to execute program modifications that advance overall privacy compliance.
  5. To coordinate University medical records management and to provide consultation as University clinics transition to electronic medical record systems.

The Scope of Privacy Regulation at UF

Federal Statutes

Florida State Statutes

International Regulations

Industry Standards