Kimberly C Gordy

Practice Areas

As the Houston office’s Digital Assets and Data Management Leader and a member of the Healthcare Privacy and Compliance team, Kimberly counsels clients across the healthcare space on cybersecurity breach response, regulatory defense, and state and federal privacy compliance. She has handled hundreds of privacy and data security incidents, ranging from sophisticated ransomware to employee theft, and approaches each matter with thoughtful nuance and an appreciation of the client’s unique operational needs.

Kimberly guides clients through the initial response, forensic investigation and fulfillment of regulatory obligations, as well as defense related to inquiries from state attorneys general and federal regulators. She has extensive experience advising long-term care clients on the intersection between HIPAA and state privacy law and maintains a special interest in working with healthcare organizations in Indian Country on matters related to the exercise of tribal sovereignty and healthcare compliance. Her work on patient consent is published in the Yale Journal of Health Policy, Law, and Ethics, and she is a frequent speaker on privacy-related matters.