Stuart Shapiro

Background

About Stuart Shapiro

Stuart S. Shapiro is a Principal Cyber Security and Privacy Engineer at the MITRE Corporation, a not-for-profit company performing technical research and consulting primarily for the US government. At MITRE he has supported a wide range of security and privacy activities involving, among others, critical infrastructure protection, policy frameworks, risk and control assessment, and incident response. In particular, he has led multiple research and operational efforts in the areas of privacy engineering, privacy risk management, and privacy enhancing technologies (PETs) for several government sponsors and has written and presented on these topics in numerous forums. In addition to these areas, most recently he has been engaged in efforts to integrate ethical analysis into the development of AI-based systems. Dr. Shapiro was co-editor of the first edition of U.S. Government Privacy: Essential Policies and Practices for Privacy Professionals (International Association of Privacy Professionals (IAPP), 2009). Recent publications include the co-authored "Engineering and Privacy" in An Introduction to Privacy for Technology Professionals (2nd edition)(IAPP, 2024),"Deriving and Using Synthetic Consequences for Privacy Risk Modeling," in ICT Systems Security and Privacy Protection (Springer, 2022),"Time to Modernize Privacy Risk Assessment," in Issues in Science and Technology (Fall 2021),"Actionable Ethics for Fairness in AI"(MITRE Center for Data-Driven Policy, 2020), and "Privacy Risk Analysis Based on System Control Structures: Adapting System-Theoretic Process Analysis for Privacy Engineering"(Proceedings of the 2016 Workshop on Privacy Engineering). Recent presentations include "Holistic Privacy Risk Analysis"(Data Privacy Board, 2025),"Modeling Privacy Attacks,"(IAPP Privacy. Security. Risk. Conference, 2023),"Privacy Enhancing Technologies: The agony and the ecstasy,""Artificial Intelligence Ethics: All hat and no cattle," and "The EU-US Data Privacy Framework: The adventure continues"(US Army in Europe and Africa Cybersecurity Summit, July 2023), and "Privacy Assurance Cases"(Harvard Berkman Klein Center for Internet & Society, 2019). Among his professional affiliations are the IAPP, the Association for Computing Machinery (ACM), and the Institute for Operational Privacy Design (IOPD). Dr. Shapiro is also a founding member of the Editorial Board of the journal AI and Ethics (Springer).