“Kimberly Gordy is an attorney of the highest caliber. She delivers superb results and is always a sturdy and competent leader.”
— Chambers USA 2024
Leveraging her crisis management skills and regulatory knowledge, Kimi Gordy navigates complex cybersecurity and privacy issues for clients across the healthcare space. In addition, her legal acumen in advising Native American organizations on issues related to sovereignty and privacy compliance is a unique skillset unmatched by anyone else in the country.
Incident Response and Regulatory Defense
Kimi is a trusted strategist, partnering with clients to understand their operational needs, reputational concerns and regulatory risk. She was cybersecurity counsel for two of the largest healthcare cyberattacks in recent years, leading crisis management, forensic analysis, patient notification and regulatory defense.
Proactive Counseling
Kimi helps clients transform their cybersecurity programs, improve regulatory compliance and foster incident response readiness. Whether advising retail pharmacies on cybersecurity risk management or energy companies on their privacy obligations, Kimi works with stakeholders to perform technical testing, policy review and employee training. For Native American and Alaska Native clients, she provides guidance on the applicability of federal and state privacy laws and has prepared privacy-related legislation for some of the largest tribes in the United States.
Kimi is the firm’s Houston Digital Assets and Data Management Leader. Prior to joining BakerHostetler, she was a federal law clerk in the Southern District of Texas, giving her critical insight into the litigation risk that so often follows a data breach. A healthcare ethicist by training, her work on patient consent is published in the Yale Journal of Health Policy, Law, and Ethics, and she is a frequent speaker on privacy-related matters.