To help law practices protect their clients’ data and meet their legal and ethical obligations, the following tables set out minimum cybersecurity expectations. They also list examples of unacceptable cybersecurity practices that we consider capable of amounting to unsatisfactory professional conduct (UPC) or professional misconduct (PM).
Cybercrime is a major risk for law practices of all sizes. The large sums of money and sensitive information entrusted to law practices make them targets for hackers and cybercriminals.
Implementing strong cybersecurity protocols and good practices is an essential and expected part of competent practice management. Principals play a crucial role in both implementing these measures, and ensuring that all staff not only understand but also consistently adhere to them.
