John P. Houston is Vice President, Information Security and Privacy, and Associate Counsel for UPMC. In this position, he has broad accountabilities across the health system, including privacy, information security, data governance and legal matters associated with the acquisition, licensing, and use of technology.

Mr. Houston has been significantly involved in UPMC’s compliance with the privacy and security provisions of the Health Insurance Portability and Accountability Act (HIPAA). Mr. Houston has testified twice before the United States Senate’s Health, Education, Labor and Pension Committee and once before the US Senate Judiciary Committee. Mr. Houston also speaks regularly regarding such topics as health care privacy, information security and health care information systems. Mr. Houston has participated on numerous industry, federal and state advisory committees regarding such matters as privacy, security, the adoption of health information technology and the exchange of health information. Mr. Houston is one of the co-founders of the Provider Third Party Risk Management Council, a group of industry leaders that develops and promotes practices to effectively manage information security-related risks in the healthcare provider supply chain.

Mr. Houston completed his undergraduate studies in 1986 at the University of Pittsburgh and received a Bachelor of Science in Computer Science and History. Mr. Houston later attended the Duquesne University School of Law where he received his Juris Doctor degree in 1994.