One third of law firms are in breach of the Data Protection Act, according to the Information Commissioner’s Office (ICO).

Some 3000 law firms face fines for failing to notify as data controllers with the ICO. Under the terms of the Data Protection Act, organisations that enter details about identifiable individuals must notify the ICO. Failure to do so may result in prosecution.