Sol Bermann


Sol Bermann is the Privacy Officer, and IT Policy and Compliance Strategist at the University of Michigan. In that roles he leads and coordinates university-wide privacy and IT policy efforts. He served as U-M's Interim CISO in 2014-2015. Previously, he was Director of Global Privacy for Walmart. In that role he provided subject matter expertise on national and international privacy and data protection laws, regulations, and best practices; assisted in developing awareness and training initiatives; and worked collaboratively across the Walmart enterprise on matters related to: uses of data, global data-flows, information security, emerging technology trends, and fraud and identity theft issues. Before joining Walmart, Sol was the Chief Privacy Officer for the State of Ohio; the first ever specifically appointed state CPO. In that role, led the development, coordination, publication and implementation of statewide privacy and security policies, standards, and procedures.In addition, he gave guidance in the drafting of state data protection laws. He is former Associate Director of the Center for Interdisciplinary Law and Policy Studies at the Ohio State University Moritz College of Law, and was an adjunct faculty member of OSU's International Studies Program, teaching on issues related to law, policy and civil liberties. Sol is a frequent speaker on issues related to privacy and data security, and is co-author, with Professor Peter Swire, of the Official Reference for the Certified Information Privacy Professional. Sol received his B.A. from Beloit College, an M.A. in Foreign Affairs from the University of Virginia, and his J.D. from the Ohio State University Moritz College of Law.

EDUCAUSE Publications

  • The Higher Education CPO Primer, Part 1: A Welcome Kit for Chief Privacy Officers in Higher Education
    • Briefs, Case Studies, Papers, Reports

    The Higher Education Chief Privacy Officers Working Group has created this resource to serve as a welcome kit for CPOs in higher education. The CPO Primer (part one) is intended to provide an overview and introductory body of knowledge to help new CPOs (or those new to higher education) better understand their job and the challenges unique to colleges and universities. The main audience for this document is a CPO or person with primary institutional responsibility for privacy.

EDUCAUSE Presentations



EDUCAUSE Involvement

  • ECAR Cloud Working Group
    • ECAR, 2014 - 2017
  • HEISC Technologies, Operations, and Practices WG
    • Working Group, 2014 - 0001
  • HEISC Advisory Committee
    • Working Group, 2014 - 0001
  • Higher Education Chief Privacy Officers
    • Working Group, 2013 - 0001
  • Higher Education Chief Privacy Officers
    • Working Group, 2011 - 2015