Law firms and LegalTech platforms sit at the intersection of privileged client data, AI adoption and growing cyber threats. AI Act, NIS2 and DORA (for financial law practices) all apply — with professional secrecy adding unique complexity.
Legal professional privilege creates unique GDPR tension — client data is sensitive but cannot always be disclosed even under breach notification requirements. AI Act catches contract analysis tools as high-risk AI. NIS2 applies to larger law firms. DORA impacts legal departments in financial institutions.