The price of effective cybersecurity can be daunting for small and midsized law firms. But the cost of inaction could be even greater, as more clients threaten to abandon firms that don’t meet their data-privacy standards.

Cybersecurity fears are not new, but clients have begun to look far more closely at their outside law firms’ data policies, said Dan Safran, president and CEO of the legal project management and technology company Legal Shift. For small and midsize firms that have neglected the issue due to the price tag, that could be a problem.