Claire Stapleton Email & Phone Number

I deployed processes that aid in the development, implementation and maintenance of, and adherence to, the policies and procedures related to data management, information privacy and security. I revamped and deployed the FDIC’s Privacy Continuous Monitoring (PCM) Program. This program reframed the way FDIC approaches privacy, drove changes in how we assessed systems to determine and manage risk, and lead to a change in the culture of the Privacy Program. I serve as a member of the Federal Privacy Council Executive Committee, co-chairing the Agency Implementation Committee (AIC). As the AIC co-chair, I provide a monthly briefing for the government privacy community, sharing information on new requirements or data collections, providing training for privacy professionals across the federal government, and collecting information from the privacy community to share with OMB to identify areas where additional training, briefings, or other guidance may be needed. I also serve as the co-chair for the Financial Regulator Community of Practice (COP). As the COP co-chair, I host monthly meetings with representatives from other financial regulators to discuss privacy risk management activities, challenges unique to smaller agencies or financial regulators, and to share best practices.I participate in Breach Response Table Top Exercises and Incident Response Table Top Exercises and support the Breach Response Risk of Harm Assessments for privacy breaches. I supported the efforts to update privacy contract clauses for future inclusion in FDIC contracts, and reviewed existing contracts for appropriate language. I served as the chair of the Technical Evaluation Panel for the multi-year OCISO contract award, supported the effort to update privacy contract clauses for future inclusion in FDIC contracts, reviewed existing contracts for appropriate language and to determine which contracts require authorization, and serve as technical monitor for the privacy support contract.

Established and managed the Privacy Program while assisting in the formation of a new government agency. My duties included: reviewing all policies and procedures or regulations that have a privacy component and making recommendations for enhancements or risk mitigations to ensure compliance with privacy laws, regulations, or best practices; developing and refining requirements to meet the operational needs of the Bureau while reducing privacy risk; creating and publishing all required privacy documentation, including the creation of privacy website notices, privacy principles, the privacy policy, and privacy compliance documents; creating and performing all privacy training, including new hire training as well as tailored training for the different business units and a handbook for sensitive information; creating an incident response plan to assess privacy events or potential breaches to determine and implement appropriate responses; incorporating privacy protections into new programs and systems; sharing information with the public about the CFPB Privacy Program; coordinating with business owners, technical experts, legal representatives, cybersecurity specialists, and external affairs staff to identify and manage privacy opportunities and risks throughout the system lifecycle; and identifying and addressing privacy concerns relating to data intake, data sharing, or data publication including de-identification risks.

Established and managed the Privacy Branch to ensure that all aspects of the programs comply with applicable Privacy Act requirements, program goals, and program policies along with relevant federal privacy laws, statutes, and regulations. This included ensuring compliance with the E-Government Act and the Fair Information Practice Principles. I served as the principal technical authority on privacy laws, policies, safeguards, business processes, and initiatives. I hired all members of the team in addition to managing contract staff. My duties included:creating the Privacy Branch, including a mission statement, privacy policy, and privacy principles; establishing a culture of privacy for the entire Verification Division, including an annual Privacy Month with guest speakers, training, posters, and other awareness activities; developing Personally Identifiable Information (PII) Guidance and distributing to the Verification Division including remote offices; creating Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), Notices of Proposed Rule makings (NPRMs), and Final Notices in response to new mandates or legislation or system changes; advising management on privacy and system implications of legislative and regulatory activities; developing policies and making recommendations regarding the collection, uses, and dissemination of PII; providing advice to senior leadership on programs and initiatives concerning privacy; representing the Verification Division at meetings with other senior officials and representatives of the advocacy community regarding data privacy and information security issues; participating in strategic operational planning with a focus on privacy concerns including data privacy safeguards; researching and analyzing sensitive policy and privacy issues; and coordinating with other business units to ensure that new initiatives include appropriate collection, use, and dissemination of personal information.

As the Deputy Privacy Officer and then as the Acting Privacy Officer, I worked to ensure that all aspects of the US-VISIT Program complied with applicable Privacy Act requirements, Program Goals, and Program Policies. My duties included: creating Privacy Impact Assessments (PIAs) and System of Records Notices (SORNs) in response to new mandates or legislation or system changes; assisting in the development of a data sharing framework to ensure that individual data owners had control over the sharing of their data once was consolidated into the DHS-wide data repository; coordinating with other agencies to create data sharing agreements; reviewing and analyzing pending legislation for its impact on the privacy of individuals; advising management on privacy and system implications of legislative and regulatory activities; developing policies and making recommendations regarding the collection, uses, and dissemination of personally identifiable information; coordinating with the Training Office to ensure 100% of government and contract staff understand the Privacy Act, E-Government Act, Homeland Security Act and other security and privacy statutes as well as the US-VISIT Privacy Policy; authoring and developing materials for testimony, briefings, Congressional questions for the record, and Congressional briefings to highlight privacy issues; and coordinating with drafters of new regulations to ensure that privacy concerns were incorporated throughout the process.

Provided support to the Director of Services Modernization, including interviewing primary stakeholders to ascertain current work flows and preparing flowcharts documenting these processes; preparing and updating statistics on project timelines and resource utilization trends over time based on contractual deliveries made and against baseline project plan; completing studies, white papers, and executive overviews; reviewing deliverables to evaluate effectiveness of programs and operations and compliance with terms of contracts; advising the Director on special projects, including IT security, privacy act implications, and office logistics; working with the Certification and Accreditation specialists to ensure that all systems were compliant; working with system owners to map Software Development Lifecycle (SDLC) process documents to the DHS SDLC process and to draft Privacy Impact Assessments; supporting the Portfolio Manager/Designated Accrediting Authority by serving as representative to the Security Certification and Accreditation Team analyzing compliance with legal application requirements; and providing direct support to the Director of Services Modernization, including attending and documenting meetings, creating discussion materials, and representing USCIS’ interests to ensure efforts were consistent with US-VISIT vision and legal requirements.

Provided analytical support including performing intensive analysis of data from multiple sources to determine trends, anomalies, and possible areas for improvement in telecommunication transactions; creating performance reports, graphs, dashboard overviews and presentations to demonstrate company performance and compliance with contract Service Level Agreements; participating in all phases of database lifecycle including defining requirements with users, design and development of database, ensuring requirements were met, and end-user training; and monitoring data to ensure that the overall goals were being met effectively and economically.

Provided support to several government agencies, including creating databases; preparing documents for publication on the agency website; leading the data integrity team which provided monthly qualitative analysis of applications; preparing reports for use by the Attorney General; and creating standard operating procedures and policy memos based on the laws, policies, and working practices of the agencies.

Education record

Education record

Education record

Department Of Homeland Security Program Manager Certification, Master’S Certificate In Program Management

Classes included Managing IT Projects; Requirements Management; Federal Contracting Basics; Project Leadership, Management.