David Loewy, PhD, is the Chief Information Security Officer at the State University of New York (SUNY), a position he has held since May 2015. Dr. Loewy is an information technology professional with more than two decades of experience in information systems and health care.
Tracing its history to 1860, SUNY Downstate is one of the country’s leading urban medical centers. Downstate comprises University Hospital of Brooklyn, five health-related colleges, and a major biotechnology initiative. It is also a large research center and the only academic medical center in Brooklyn, a borough of more than 2.5 million residents. Downstate is one of the 64 campuses in the SUNY System.
Dr. Loewy works with key SUNY staff from the information technology (IT) area, external providers, data custodians, and governance groups in the development of policies, standards, and procedures; coordinates the development and delivery of education and training programs on information security and privacy matters for employees, consultants, and other authorized users; and performs and documents risk assessments and implements policies, procedures, and controls to address areas of risk.
In his tenure at Downstate Dr. Loewy has developed an overall compliance strategy and developed and deployed a Risk Assessment Program. He also coordinates with other SUNY health science centers to develop information security policies, standards, and procedures. In addition, Dr. Loewy speaks at National conferences regarding the Cyber Security Awareness program he developed and implemented at SUNY.
Prior to joining Downstate, Dr. Loewy led HealthCare Informatica Corporation, providing healthcare entities with a range of services pertaining to regulatory compliance requirements, especially those related to the privacy and security of patient information. The mission of the corporation was to transform technology from being a challenge to an asset for healthcare organizations.
In this capacity, Dr. Loewy served in a variety of contractual roles both nationally and globally. He was a HIPAA (Health Insurance Portability and Accountability Act) Privacy and Security Subject Matter Expert (SME) and Program Manager for Cleardata in Phoenix and medCPU in New York and Israel, and performed a similar role for CNA Insurance in Chicago. He was earlier ICD-10 Program Director for Hartford HealthCare in Connecticut. He served as Senior Project Manager for Maine Medical Center in Portland; Roswell Park Cancer Institute in Buffalo, New York; CHS (Community Health Systems) in Tennessee, Alabama, and Illinois; and KCI in Texas, North Carolina, Montana, and Budapest, Hu
Dr. Loewy also was Senior Healthcare Consultant and Project Manager for Electronic Health Resources, LLC; and Senior Project Manager for the Office of the Chief Technology Officer (CTO) for the government of the District of Columbia. From 2006 to 2008, Dr. Loewy was International IT Management Expert – Healthcare, National Web Portal, for the Ministries of Finance and Health in Mongolia.
Dr. Loewy received his Bachelor of Science degree from Harvard University and his PhD from the Mongolian University of Science and Technology. He has received Project Manager Certificates from Boston University and a Project Director Certification from the International Project Management Association. His activities include membership in the New York City Emergency Preparedness Committee; serving as a member of Downstate’s Middle States Accreditation Distance Learning Policy and Procedures Work Group; and being a member of the Board of Directors and Compliance Resource of Cape Fear Group Homes.
Dr. Loewy is a member of the Project Management Institute and Institute of Electrical and Electronics Engineers; contributing member of the Health Care Compliance Association (HCCA); contributor to Healthcare Information and Management Systems Society (HIMSS) and Workgroup for Electronic Data Interchange (WEDI) ICD-10 National Pilot Programs; contributor to the National Institute of Standards and Technology (NIST) Cybersecurity Framework; and an Information Security Media Group speaker and podcast presenter.
Dr. Loewy is the author of Y2K Compliance Methodology for Nuclear Power Generation Sites (© 1998) and the HIPAA Survival Kit for Providers (© 2002, 2008, 2011, 2014) as well as various magazine articles.
