Solomon Meru
About me
I am a legal practitioner with a focus on dispute resolution, regulatory advisory, and the growing intersection between law and technology. My work involves supporting individuals and organisations in navigating complex legal and operational risks, particularly in environments shaped by digital systems and data.
I am particularly interested in Governance, Risk, and Compliance (GRC), as well as AI and data governance, and the broader challenge of aligning legal, technical, and operational perspectives in cybersecurity.
My background is in civil and commercial litigation, but over time, my practice has expanded into areas such as data protection, regulatory compliance, and cybersecurity related issues. I regularly engage with matters involving data governance, incident response, and digital risk, with an emphasis on practical, real-world application.
I support clients (individuals, start-ups and established businesses) through data privacy audits, breach response situations, and regulatory engagement, as well as structuring technology and SaaS arrangements. This has required not just legal analysis, but an appreciation of how these risks arise in actual systems and business operations.
I tend to approach problems from a practical standpoint, breaking down legal and regulatory requirements into clear, usable guidance that clients can act on. Much of my work involves helping clients understand their exposure, strengthen compliance processes, and respond effectively in situations where timing and clarity matter.
Photos
Skills
Work Experience
Partner
Meru and Njagi Advocates
2019-01-07
-
Present
•Head the technology law function, setting internal strategy, supervising engagements, and ensuring quality delivery across data protection, cybersecurity risk, and emerging technology matters
•Drive firm growth in technology and cybersecurity services, developing new client relationships and expanding advisory work in digital risk, regulatory compliance, and data governance
•Coordinate and allocate matters across the team, ensuring quality control, consistency in delivery, and effective handling of complex, risk-sensitive engagements
•Advise clients on liability exposure, dispute resolution, and regulatory compliance, with a strong focus on mitigating legal and operational risk
•Lead litigation and draft legal documentation, including matters involving data breaches, digital assets, and high-value commercial disputes
•Advise fintechs on incident response, data breach management, and regulatory engagement, helping navigate compliance requirements and avoid potential enforcement action
•Support start-ups through a full data protection and implementation of a compliance framework ahead of regional expansion
•Draft and structure SaaS agreements for clients in the financial sector, addressing data protection, liability, and security considerations
Research Fellow
Information Society Law Center - University of Milan
2026-03-02
-
Present
•Contributing to research under the “Augmented Jurist” theme, exploring how AI and digital systems are reshaping legal reasoning, professional judgment, and the evolving practice of law.
•Engaging in ongoing collaboration with an international network of scholars through seminars, research dialogues, and interdisciplinary initiatives.
•Developing and contributing to research outputs, including articles, commentary, and thought leadership on emerging issues in technology law.
•Participating in and supporting research initiatives, discussions, and events addressing the legal implications of digital transformation.
•Active involvement in evolving discourse on the role of law in shaping and responding to technological change.
Education
Cyber Security - AfricaHackOn Swara
AH Level 1
2025-07-10
-
The AfricaHackon Cybersecurity Programme is a six-month, hands on training and mentorship initiative designed to develop practical, job ready cybersecurity skills. Delivered in a hybrid format, the programme combines expert-led sessions, team-based learning, and real world labs covering areas such as ethical hacking, threat analysis, cyber defence, and governance.
A key focus of the programme is for participants to work through simulated and real world scenarios, building the ability to identify vulnerabilities, analyse threats, and respond to security incidents.
Overall, the programme is structured to bridge the gap between theory and practice, preparing participants to operate effectively in real cybersecurity environments.
Bachelor of Law (LLB)
Degree
2007-08-27
-
2011-12-16
I hold a Bachelor of Laws (LL.B) degree, where I developed a strong foundation in key areas of law, including but not limited to civil law, contract law, intellectual property law, and commercial law.
This placed a strong emphasis on analytical thinking, legal research, and structured problem solving. I was trained to interpret statutes, engage with case law, and apply legal principles in practical, real world situations. This has carried through into how I approach governance, risk, compliance, and advisory work in practice.
It also strengthened my written and oral advocacy through consistent legal writing, argumentation, and practical coursework skills that continue to support my work at the intersection of law, technology, and governance, particularly in areas such as litigation, data protection, regulatory compliance, and emerging technology frameworks.
Data Protection Course
Certificate
2022-09-19
-
2022-10-21
I completed a Data Protection course at Centre for Intellectual Property and Information Technology Law (CIPIT) Strathmore University, which focused on the legal and practical aspects of data protection and privacy within the Kenyan and global context.
The course covered key areas such as the Kenya Data Protection Act 2019, data subject rights, obligations of data controllers and processors, cross-border data transfers, and compliance frameworks. It also explored emerging issues around digital platforms, data governance, and regulatory enforcement.
It strengthened my understanding of how data protection operates in practice, particularly in advising on compliance, assessing risk, and interpreting regulatory requirements. This continues to inform my work in areas involving data governance, technology, and regulatory advisory.
Advocates Training Programme
Post Graduate Diploma
2012-01-09
-
2012-11-23
I completed the Advocates Training Programme (ATP) Postgraduate Diploma at Kenya School of Law, which provided the practical training required for admission to the Bar.
The programme focused on translating legal theory into practice, covering key areas such as civil and criminal litigation, conveyancing, commercial transactions, probate, and professional ethics. It involved intensive drafting, court procedure, and client-focused work, sharpening my ability to handle matters from instruction through to resolution.
This training strengthened my practical approach to legal work, particularly in managing files, engaging with procedural requirements, and delivering clear, structured legal solutions. It continues to inform how I approach both contentious and advisory matters in practice.
Honors & awards
Next Hall of Fame Litigation Lawyers In Kenya 2025
2025-04-07
Recognised under the Next Hall of Fame Litigation Lawyers in Kenya 2025 by The Lawyer Africa.
Top 100 Litigation Lawyers in Kenya
2024-05-20
Recognised among the Top 100 Litigation Lawyers in Kenya 2024 by The Lawyer Africa
Top 50 Up and Coming Litigation Lawyers
2023-05-08
Recognised among the Top 50 Up and Coming Litigation Lawyers in Kenya 2023 by The Lawyer Africa.