Search for:

Nicholas R. Merker

Nick Merker provides practical, actionable privacy compliance and cybersecurity incident response counseling from the lens of a practitioner with a ten-year, pre-law computer systems, network, and security engineering background. Nick is a computer scientist by trade and, prior to becoming an attorney, he led the information security team and program at a large .com. He leverages his deep understanding of Internet architecture, technology systems, and new media to help clients navigate the ever-changing privacy and cybersecurity legal landscape. He is also a sought-after international speaker, teacher, writer and professor on data security and privacy-related legal issues. He has led training and/or presentations at major international conferences, including BlackHat, RSA, TwitchCon, the Global Privacy Summit, Privacy. Security. Risk., the ISSA International Conference, and others. He is also Faculty at the International Association of Privacy Professionals where he leads global privacy trainings to executives, engineers, lawyers and managers. Each Fall, Nick teaches Data Security/Privacy Skills at Indiana University Robert H. McKinney School of Law, a class focused on providing law school students the skills necessary to actually practice in this area.

On 1 May 2023, Governor Eric Holcomb’s signed Indiana’s Consumer Data Protection Act into law, making Indiana the seventh US state to pass comprehensive consumer data privacy law — joining California, Iowa, Utah, Connecticut, Virginia, and Colorado (Tennessee has since enacted a consumer privacy statute; and Montana and Texas have passed laws that are currently awaiting their respective governors’ signatures). The Consumer Data Protection Act closely tracks prevailing trends in US state privacy legislation and in particular emulates the Virginia Consumer Data Protection Act, which came into force at the start of 2023. The new law will come into effect on 1 January 2026.

Cybersecurity threats and risks are increasing each day and companies are extremely cognizant of the critical issues involved – from making sure that company data complies with vigorous and ever-changing regulations, to dealing with cyber threats, breaches and ransomware attacks. In the Future of Disputes virtual program, former Manhattan District Attorney and Global Chair of Baker McKenzie’s Cybersecurity Practice, Cyrus Vance, Jr. led a discussion with Baker McKenzie practitioners in North America discussing the life cycle of a cyber-attack, including cyber insurance, privacy notification obligations, investigations, and post-event litigation.

Explore Data PULSE, a platform which helps you to navigate the complex landscape of data, regulatory and IP protection concerns at each stage of the medical product life cycle. As you navigate through each key issue, Data PULSE will help you to identify and mitigate risks across multiple jurisdictions and optimize your strategy through research, market authorization and post-market study phases.