Alex Kimata

Alex delivers strategic counsel to help companies develop and implement compliant data and privacy security frameworks that mitigate risk and allow a business to thrive.

Alex advises clients ranging from startups to Fortune 500 companies on privacy and data security matters, from starting a new privacy program to implementing sophisticated global data transfer mechanisms, to evaluating artificial intelligence frameworks. He focuses on domestic and international privacy and data security law compliance, critical infrastructure protection, service provider and vendor due diligence, and oversight.

With a business mindset, Alex helps companies assess their risk tolerance based on priorities such as stage of growth, operational needs, and industry sector. He develops tailored data usage, privacy and data security policies and protocols that balance risk and business growth and counsels on day-to-day implementation, management, and concerns.

He negotiates a variety of technology agreements, including SaaS, software and other licensing agreements, so companies can commercialize their intellectual property assets. Clients appreciate that Alex takes time to explain the importance of specific provisions and the interplay with the organization’s holistic data security and privacy framework.

Alex holds CIPP/US and CIP/T certifications from the International Association of Privacy Professionals.

Before joining Holland & Hart, Alex practiced at a Denver law firm.

Experience

Data Privacy and Security

Holistic data privacy and information security legal and regulatory compliance.
Strategic counseling on data processing practices.
Development of disclosures, policies, data retention, and data management practices.
Vendor, service provider, and third/nth party security risk management program and policy development, oversight, management, and audit.
Data Breach response, including counseling on legal requirements and strategic next steps.
Providing subject matter expertise on cybersecurity and privacy issues to buyers and sellers

Technology Transactions and Licensing

Technology assets, solutions, equipment, and services development, marketing, licensing, deployment and distribution, including SaaS and cloud services.
Content and data licensing, protection, and distribution.
Intellectual property, idea, and trade secret protection, development, licensing and transfer transactions and strategic advice.

Commercial Agreements

Professional Services Agreements
Distribution Agreements
Reseller Agreements
Mergers and Acquisitions

News

Publications

August 1, 2018
Section 702 MalFISAnce Colorado Technology Law Journal, Volume 16, Issue 2

Speaking Engagements and Events

May 15, 2025
Understanding and Navigating the California Invasion of Privacy Act
Co-Presenter, Association of Corporate Counsel, Nevada Chapter
May 15, 2025
Emerging Issues in Privacy & Technology Half-Day CLE Event
ACC Nevada, Las Vegas, NV
November 6, 2024
Privacy Basics for the Colorado In-House Lawyer
Presenter, H&H In-House CLE
June 12, June 27, 2024
Protecting Data Where It Lives - Cloud, 3rd Party, GenAI, File Shares, Devices
CISO Executive Network Roundtable, Las Vegas, NV, Boise, ID, Denver, CO
June 11, 2024
CyberLegalese Decoded: Navigating SEC Reporting, Legal Risks, and Cybersecurity Governance
Presenter, Rocky Mountain IP Conference
June 6, 2024
Cyber and Data Breach Roundtable
Panelist, Masters Conference, Denver, CO
April 18, May 1, 2024
Security Operations- How to Get Our "_DRs" In Order
CISO Executive Network Virtual Roundtable, Las Vegas, NV, Boise, ID, Salt Lake City, UT
March 6, March 20, March 21, 2024
Zero Trust Ingredients: IAM + Least Privilege + Data Protection + ?
CISO Executive Network Roundtable, Las Vegas, NV, Denver, CO, Boise, ID
January 25, February 1, February 7, 2024
Layered Defense Architectures: From Actors to Assets & In-Between
CISO Executive Network Virtual Roundtable, Las Vegas, NV, Boise, ID, Denver, CO
November 14, December 12, 2023
Visibility of Our Assets and the Attack Surface
CISO Executive Network Virtual Roundtable, Boise, ID
October 3, October 11, October 24, 2023
Identity First Security Strategies
CISO Executive Network Virtual Roundtable, Boise, ID
August 22, August 30, September 19, 2023
Controlling Data Sprawl Risks- Third Parties, Cloud, & Insiders
CISO Executive Network Roundtable, Boise, ID, Las Vegas, NV, Denver, CO
January 31, 2023
Evolving Threat Landscape
CISO Executive Network Roundtable, Presenter, Denver, CO
January 19, 2023
Evolving Threat Landscape
CISO Executive Network Roundtable, Presenter, Las Vegas, NV
December 1, 2022
Moving Security Operations from Reactive to Proactive
CISO Executive Network Roundtable, Presenter, Denver, Colorado
November 30, 2022
Moving Security Operations from Reactive to Proactive
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
October 25, 2022
Securing Our Move to the Cloud and Putting Security into DevOps
CISO Executive Network Roundtable, Presenter, Denver, Colorado
October 19, 2022
Securing Our Move to the Cloud and Putting Security into DevOps
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
September 15, 2022
Data Protection – Identity as a Core Control for Security
CISO Executive Network Roundtable, Presenter, Denver, Colorado
September 9, 2022
2022 Cybersecurity Landscape: Security, Risk Visibility, and Reporting
Holland & Hart Client Update Seminar, Presenter
August 31, 2022
Data Protection – Identity as a Core Control for Security
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
June 23, 2022
Threat, Vulnerability, and Attack Surface Management
CISO Executive Network Roundtable, Presenter, Denver, Colorado
June 1, 2022
Threat, Vulnerability, and Attack Surface Management
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
May 5, 2022
Data Protection – Governance, Security, and Privacy Controls
CISO Executive Network Roundtable, Presenter, Denver, Colorado
April 27, 2022
Data Protection – Governance, Security, and Privacy Controls
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
March 31, 2022
Zero Trust and Combating Risky User Behavior
CISO Executive Network Roundtable, Presenter, Denver, Colorado
March 24, 2022
Zero Trust and Combating Risky User Behavior
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada
January 27, 2022
Current State of Cyber Threats, Cyber Extortion, and the Ransomware Challenge
CISO Executive Network Roundtable, Presenter, Denver, Colorado
January 19, 2022
Current State of Cyber Threats, Cyber Extortion, and the Ransomware Challenge
CISO Executive Network Roundtable, Presenter, Las Vegas, Nevada

Professional and Civic Affiliations

Colorado Bar Association, Member
Minoru Yasui Inn of Court, Member
International Association of Privacy Professionals (IAPP), Member, 2018-Present
IAPP Fellow of Information Privacy (FIP), 2025
Sakura Foundation, Community Engagement Board Member, 2019-Present
Colorado Common Cause, Board Member, 2020-Present
Rose Foundation, Giving Circle Participant

Practice Areas

Industries

Menu