Kimberly Gordy approaches healthcare privacy with thoughtful nuance and an appreciation of the industry’s unique operational needs. As a member of the Healthcare Privacy and Compliance team, Kimberly counsels clients on a range of privacy and data security issues, including cybersecurity breach response, regulatory defense and Health Insurance Portability and Accountability Act (HIPAA) compliance. She has handled hundreds of healthcare breaches, ranging from complex ransomware attacks to employee snooping and data theft. Kimberly guides clients through the initial response, forensic investigation and fulfillment of regulatory obligations, as well as defense related to inquiries from state attorneys general and federal regulators.
Kimberly works with clients across the healthcare space. She has extensive experience advising long-term care clients on the intersection between HIPAA and state privacy law and maintains a special interest in working with healthcare organizations in Indian Country on matters related to the exercise of tribal sovereignty and healthcare compliance. Her work on patient consent is published in the Yale Journal of Health Policy, Law, and Ethics, and she is a frequent speaker on privacy related matters. Prior to entering private practice, Kimberly served as law clerk to the Honorable George C. Hanks, Jr., and the Honorable Mary Milloy for the Southern District of Texas.