Data protection
Explore practical guidance, learning and resources designed to help you and your organisation understand your obligations.

Changes to GDPR – what solicitors need to know
Parts of the UK GDPR have been changed and replaced by the Data (Use and Access) Act 2025.
Find out what this means for your legal practice and what you need to do to stay compliant.

All resources
- Appointing a data protection officer (DPO) – guide for law practices02 Oct 2025
- Consent05 Aug 2019
- Contract as lawful basis02 Oct 2025
- Cyber security guidance for solicitors15 Sep 2025
- Cyber security guidance for solicitors15 Sep 2025
- Data processing: legal professional privilege (LPP) and client confidentiality19 Nov 2025
- GDPR for solicitors26 Sep 2025
- Legitimate interests05 Aug 2019
- Personal data flows to and from the UK21 Mar 2022
- Report a data breach02 Oct 2025
- Respond to a subject access request (SAR)01 Aug 2019
- What to do after a cyber-attack26 Jun 2025
- Can the deadline for a subject access request be extended?16 Sep 2025
- Do I need client consent to change file retention periods?14 Apr 2025
- How can my firm use AI to benefit our business?27 Jan 2025
- How do I request a client’s medical records?08 Aug 2025
- I’ve received a subject access request. What should I do?08 Aug 2025
- Compliance calendar for small law firms27 May 2025
- Consent form: Access to client health records14 Nov 2018
- Changes to GDPR – what solicitors need to know17 Sep 2025
- Legal Aid Agency data breach12 Dec 2025
The Law Society is the independent professional body for solicitors. Our vision is to promote, protect and support solicitors, the rule of law and justice in England and Wales.
Maximise your membership
My LS gives you access to the latest news, events, books and resources to help you excel within your practice.




