Skip to content Skip to navigation

Stanford University Privacy Office

The Stanford University Privacy Office is a division of the Office of  the Chief Risk Officer (OCRO) and strives to be a valued partner and advisor to students, faculty, management and members of the executive leadership.  The Stanford University Privacy Office is committed to working with parties across the Stanford community to protect the integrity of data collected, created, transmitted, released and stored by Stanford affiliates and entities.   In support of our effort to protect data, we work with stakeholders throughout the Stanford community to provide training, guidance and consultation in furtherance of the University's mission, and applicable privacy laws and regulations.   















Stanford’s 2020 Annual HIPAA Re-training Program Requirement 

HIPAA/Protecting Patient Privacy 2020 (PRIV-2020-WEB) and

HIPAA Privacy for Researchers (CLIN-2020-WEB)

Currently in progress!


Between October 21, 2019 and December 6, 2019 faculty, staff and student workers who are part of Stanford’s Covered Entity (SACE) are required to complete HIPAA Training annually. This program fulfills the training requirement for 2020.  An email reminder has been sent to your email address if required to re-take the training. All new employees required to take HIPAA training will be auto-enrolled and have 30 days from the date of hire to complete the training.  



Please contact the University Privacy Office at:




Our Services

The Privacy Office works collaboratively with different constituents across Stanford University to protect the privacy of the Stanford Community, including policies, training and consultations.

Privacy Incidents and Complaints

Do you know or suspect that an event may have violated the privacy of an individual(s)?  Please let us know.

Departing Personnel Data Management and Access Form

Any individual affiliated with Stanford who is leaving the University must review the Departing Personnel Data Management and Access policy and complete the form here. Individuals who wish to have continued access to data after their departure must also complete this form.


Departing Personnel Data Management and Access Form

Departing Personnel Policy