LOCS:23 is the only official ICO approved GDPR Certification for Legal Services. The certification scheme is designed to enable law firms, barristers, chambers, and legal service suppliers to measure, audit and ultimately comply with UK GDPR.

The overall objective is to enhance client confidence and simply supply chain due diligence. It is anticipated that this will become the legal industry’s benchmark standard for data protection.

No

ICO certifications are not mandatory although complying with GDPR is.

The certification scheme enables organisations to measure themselves against the mandatory legal requirements and demonstrate to clients that they are officially compliant.

There are four steps

1. PLAN Download the LOCS:23 standard (free from the ICO website)

2. GET READY Carry out a gap analysis comparing your current activities against the standard (either DIY or using a LOCS Approved Implementor to assist.)

3. CERTIFY Apply to the official independent Certification Body to arrange your compliance audit.

4. CELEBRATE Let your clients know you are officially GDPR compliant.

The official Certification Body will inform you of actual costs on application but expect to pay around £8000

This depends on the firm and how mature its existing data protection framework is.