ACC Launches Data Security Program for Law Firms

The legal industry’s first comprehensive data security evaluation and accreditation program has been launched today.

The Data Steward Program (DSP), which has been developed by the Association of Corporate Counsel (ACC), will enable quick assessments and comparisons of law firms’ data security standards by prospective clients.

The ACC said the program has been introduced in light of growing concerns from both law firms and their clients regarding the safety of the highly sensitive data being held.

Designed by working groups of law firms and in-house counsel, the DSP has established a standardized framework for assessing, scoring, benchmarking, validating and accrediting a law firm’s posture toward client data security. This information can be shared easily and securely with the current or potential clients of a law firm via an online platform.

The controls have been leveraged from existing data security frameworks such as NIST, but have been customized to meet the specific needs of law firms.

Law companies that sign up to the DSP have two evaluation tiers to choose from. Tier 1, named the DSP Core Assessment, allows companies of all sizes to have their information security capabilities assessed, while the steps they take to protect confidential data will be displayed on the online platform. Under Tier 2, law firms are offered confidential, independent validation of their self-assessment, and if the threshold requirements are met, will gain the award of an ‘ACC DSP Accreditation.’

Jim Merklinger, president of the ACC Credentialing Institute, commented: “The ACC Data Steward Program is a clear win-win for law firms and their clients. Currently, law firms must spend considerable time and money completing individual data security evaluations for their clients. The ACC Data Steward Program provides both standardized, easily comparable evaluation, and, if desired, accreditation of law firms’ security practices – all at a fraction of the time and cost. While the DSP is thorough – assessing 160 controls – early users have indicated that a well-prepared law firm can complete the entire process in a few hours. Review by in-house counsel is equally straightforward. ACC is confident that this new program will prove to be a valuable tool for our members and law firms alike.”

ACC added that a set of charter law firms have already signed up to the program and are currently completing their first Data Steward assessment.