What We Do

• Protect the confidentiality, integrity and availability of citizens’ data.
• Improve education and awareness on information security, privacy, disaster recovery and continuity of operations.
• Provide incident management, response, investigation, and reporting infrastructure.
• Identify and provide guidance on privacy and security risk management through the evaluation of threats and vulnerabilities, and assure the creation of appropriate remediation plans.
• Provide privacy and security testing and monitoring in support of policy enforcement and operational assurance.
• Develop privacy and security policies and standards as they relate to emerging laws and regulations, industry best practices, and department compliance goals.
• Conduct, advise and assist in all Health Insurance Portability and Accountability Act (HIPAA) activities.

About Us

The Privacy and Security Office provides information security leadership for the Department of Health and Human Services. We safeguard the information entrusted to the department from unauthorized use, disclosure, modification, damage or loss.

Mission Statement

The mission of the N.C. Department of Health and Human Services is, in collaboration with our partners, to protect the health and safety of all North Carolinians and provide essential human services.