Information security – a new ever-present risk in the legal industry

According to the 2026 Wolters Kluwer Future Ready Lawyer Survey, information security has evolved from an operational concern into an ever‑present risk across the legal sector. To meet these threats, legal professionals must remain vigilant and adopt proactive risk‑management strategies.

Cyber threats and shadow AI

The survey indicates that 46% of legal professionals view data‑protection compliance and the safeguarding of sensitive information from cyber threats as top concerns, while 43% highlight the challenge of maintaining client confidentiality.

Managing escalating information‑security risks is also expected to be one of the most impactful trends over the next three years, with 80% of respondents anticipating significant effects on their organisations. However, only 31% of organisations feel very prepared to face these challenges, highlighting the need for stronger, more comprehensive security strategies.

“The proliferation of unauthorised AI tools (‘shadow AI’) threatens client confidentiality, regulatory compliance, and professional standards. This demands a comprehensive response that integrates policy, technology, AI literacy, and organisational culture. Legal organisations should establish clear approved‑use policies,” suggests Licia Garotti, Partner at PedersoliGattai Law Firm.

Data security measures

Remote working has increased exposure to cyber threats, with 37% of respondents identifying remote‑work security as a significant challenge. Cloud‑based storage introduces additional vulnerabilities, while AI adoption further complicates the landscape:

39% of legal professionals express ethical concerns relating to AI and data privacy, and 36% report difficulties integrating AI into existing systems. Legal organisations are responding by hiring technologically skilled professionals and prioritising staff training in information‑security best practice. According to the survey: 55% use multi‑factor authentication,
50% use encrypted communication tools, and
49% conduct regular security audits
to protect client information.

What further measures should legal organisations consider?

“Law firms should recognise that virtually every lawyer now uses AI. Without secure tools, they will turn to ‘shadow AI’, creating significant ethical and reputational risks. The only effective solution is a proactive approach: providing lawyers with secure, approved AI tools that meet their needs. Bans and restrictions simply do not work—lawyers will find ways to use AI regardless, but they may do so in uncontrolled and potentially dangerous ways,” concludes Tomasz Zalewski, Partner at Zalewski Legal.

To read the full legal‑industry AI analysis, download the 2026 Wolters Kluwer Future Ready Lawyer Survey Report >>