Privacy Champions

Privacy Champions are individuals within ASU’s business units who have received data privacy training and serve as a resource for their units for privacy issues and concerns, with support from Enterprise Technology’s privacy function.  

Privacy Champions also serve as liaison to privacy functions across ASU’s enterprises, and provide a path for raising privacy concerns, issues, training needs, and questions across ASU, as well as informing enterprise-wide privacy strategy. 
 

Privacy Champion Role & Responsibilities

A Privacy Champion is a dedicated individual within a business unit who:

1. Serves as a primary resource for basic privacy questions and concerns, providing guidance aligned to institutional policies and best practices.
2. Facilitates privacy training and awareness by sharing materials, conducting Privacy by Design sessions, and connecting peers with relevant privacy resources.
3. Acts as a liaison with all relevant enterprise privacy stakeholders, ensuring that unit-level privacy activities and challenges are communicated to enterprise structures and that enterprise-level guidance and strategies are effectively disseminated within the unit.
4. Contributes to risk assessments by reviewing unit processes and documentation against privacy standards, such as the NIST Privacy Framework.
5. Monitors and escalates privacy issues to ensure timely resolution and alignment with university-wide strategies.

Examples of Specific Privacy Champion Tasks

• Respond to Routine Privacy Inquiries: Address basic questions from unit staff about proper handling of sensitive data or policy requirements.
• Coordinate Annual IT Risk Assessments: Collaborate with unit leadership to identify privacy risks, gather relevant documentation, and provide input on mitigating controls.
• Promote & Conduct Training: Organize or deliver short training sessions on privacy fundamentals, ensuring unit colleagues remain informed about evolving best practices.
• Conduct Privacy by Design reviews: Work with units to ensure privacy best practices are addressed when developing new programs, products, services, or novel uses of data.
• Track & Report Unit-Level Insights: Monitor emerging privacy issues, incidents, or trends within the unit; share feedback with enterprise privacy stakeholders.
• Facilitate Escalations: If significant privacy risks arise, ensure they are documented, communicated, and tracked through resolution with central privacy or security teams.

Current Privacy Champions

Please don’t hesitate to reach out to your local Privacy Champion with any privacy questions:

Don’t see your unit listed? Recommend a privacy champion for your unit by emailing ben.archer@asu.edu

After a potential Privacy Champion is nominated, we will reach out to the individual to explain the role. If the individual accepts the nomination, they will be onboarded and provided additional training to support their role.