GDPR and DPA guidance for solicitors in law firms

This guidance is for solicitors in law firms.

It addresses the data protection regime in the UK, which includes the:

  • EU General Data Protection Regulation (GDPR)
  • UK Data Protection Act 2018 (DPA)

Our guidance focuses on the data protection implications of the solicitor-client relationship – solicitors are data controllers of their clients’ personal data.

However, law firm data protection leads also need to consider the management of personal data.

Download the guidance

GDPR and DPA guidance for solicitors in law firms (PDF 1.21 MB)