SERVICES

Legal Services Operational Privacy Certification Scheme (LOCS:23)

A significant benchmark for law firms and SaaS providing legal service delivery platforms

Overview

The newly approved Art.42 certification scheme, Legal Services Operational Privacy Certification Scheme (LOCS:23) provides law firms and Software-as-a-Service (SaaS) companies building legal service delivery platforms with a structured framework to benchmark and implement best practices for client data protection.

LOCS:23 Data ControllerLOCS:23 Data Processor

Benefits for Law Firms

Client trust

By achieving LOCS:23 certification, firms can demonstrate their commitment to data security, potentially reducing the risk of enforcement action and fines from the ICO.

Competitive advantage

Certification can be a competitive advantage, allowing firms to win tenders and reassure clients that their information is in safe hands.

Alignment with existing standards

LOCS:23 is designed to complement, not replace, existing data and information security standards. There is a significant overlap between LOCS:23 and other recognised frameworks, such as ISO 27001 and ISO 27701.

Firms that have already achieved certification against these standards will find much of the groundwork for LOCS:23 compliance already in place. LOCS:23 builds on these existing frameworks by providing specific guidance tailored to the legal sector.

Opportunities for SaaS legal tech companies

The launch of LOCS:23 presents a significant opportunity for SaaS companies that provide legal services or software platforms to the legal sector.

These companies can develop solutions that align with LOCS:23 controls and become certified themselves, enhancing their reputation within the sector and helping law firms achieve and maintain compliance.