Zachary Heck

Zach’s practice focuses on information privacy and data security. Specifically, Zach assists clients in the areas of:

• Data Governance
• Incident Response and Data Breach
• Policy Development and Training
• Regulatory Compliance
• SaaS Development and Negotiation
• Data Processing Agreement Development and Negotiation
• Security Framework Development (e.g., NIST 800-171, FTC Safeguards Rule, etc)

Zach has experience advising clients with respect to data breach and incident response counseling and remediation, FTC and state investigations, federal privacy regulations such as HIPAA, FCRA, TCPA, and GLBA,  state privacy laws (e.g., CCPA/CPRA), and government contracting security requirements (e.g., NIST 800-171). He also provides regulatory analysis, risk management, policy development, training and audits. 

The Dayton Business Journal named Zach a member of the 2018 Forty Under 40 class of emerging leaders and the Dayton Bar Association recognized him as a 2018 Rising Star of the Bar. He is an adjunct professor of cybersecurity law at Indiana University Maurer School of Law, as well as Wright State University, where he earned the 2017 Excellence in Teaching Award for Adjunct Faculty. He is a Certified Information Privacy Professional in the fields of United States and European Union laws and regulations.  Zach also holds the Certified Information Privacy Manager accreditation from the International Association of Privacy Professionals.