Overview
The newly approved Art.42 certification scheme, Legal Services Operational Privacy Certification Scheme (LOCS:23) provides law firms and Software-as-a-Service (SaaS) companies building legal service delivery platforms with a structured framework to benchmark and implement best practices for client data protection.


Benefits for Law Firms
Client trust
By achieving LOCS:23 certification, firms can demonstrate their commitment to data security, potentially reducing the risk of enforcement action and fines from the ICO.
Competitive advantage
Certification can be a competitive advantage, allowing firms to win tenders and reassure clients that their information is in safe hands.
Alignment with existing standards
LOCS:23 is designed to complement, not replace, existing data and information security standards. There is a significant overlap between LOCS:23 and other recognised frameworks, such as ISO 27001 and ISO 27701.
Firms that have already achieved certification against these standards will find much of the groundwork for LOCS:23 compliance already in place. LOCS:23 builds on these existing frameworks by providing specific guidance tailored to the legal sector.
Opportunities for SaaS legal tech companies
The launch of LOCS:23 presents a significant opportunity for SaaS companies that provide legal services or software platforms to the legal sector.
These companies can develop solutions that align with LOCS:23 controls and become certified themselves, enhancing their reputation within the sector and helping law firms achieve and maintain compliance.