Corporate Counsel Group Issues Law Firm Cyber Guidance

The Association of Corporate Counsel (ACC) has issued its first-ever guidelines on the basic data security measures that in-house counsel should expect from their law firms, in the wake of reported data breaches at Cravath Swaine & Moore LLP, Weil Gotshal & Manges LP and other firms.

Some of corporate America’s most sensitive information resides with its lawyers, making law firms prime targets for hackers. The ACC’s guidance addresses issues such as data encryption, breach reporting and security review rights.

General counsel are very concerned about their law firms’ cybersecurity, in part because some observers view the firms as the ...