skip to main content

Prioritising client data confidence with LOCS:23 certification

22nd Apr 2025 | Data Protection | Our standards
LOCS:23 logo, with black text on a white background

We are pleased to announce that, after undergoing an extensive audit throughout 2024, Muckle is now certified to LOCS:23, a UK GDPR certification scheme.

This ensures the highest standards of security for our clients' personal data.

What is LOCS:23?

The Legal Services Operational Privacy Certification Scheme (LOCS) is a newly established industry standard, approved by the Information Commissioners’ Office (ICO), the UK’s only data protection regulatory body.

It is designed to assist legal service providers in demonstrating compliance with UK data protection laws and ensuring both quality and consistency across the sector.

The LOCS:23 standard was created in response to growing industry demand for a standardised way for legal service providers to protect clients’ data in accordance with UK GDPR, particularly when that data is shared with other legal service providers and third-party vendors.

This standard aims to ensure that legal service providers can prove they will protect client data and keep it safe, maintaining the trust relationship between clients and their legal representatives.

What’s the process for becoming LOCS:23 certified?

The process of becoming a LOCS:23 Certified Data Controller can include working with an implementor, compliance partner or consultant to prepare for certification. You are then independently audited and certified by the official UKAS-accredited certification body for LOCS:23, ADISA Certification.  

Throughout our journey, we were supported by Ben Murphy and the team at barrister-led legal compliance experts Briefed. This initially involved conducting an initial gap analysis against the scheme's criteria before planning for certification.

The certification process included reviewing our compliance documents and an onsite audit to determine how data is embedded into our business.

Alex Craig, head of commercial and data protection, said: “As law firms and barristers' chambers handle vast amounts of personal data, there was a clear need for a robust certification scheme.

“At Muckle, we pride ourselves on both championing innovation and prioritising client data security, so it made perfect sense to be an early adopter of this certification.

“We hope to see many other law firms joining us on this journey, ultimately helping to instil greater confidence in the legal industry's handling of personal data.”

For more information, please contact Alex using [email protected] or 0191 211 7911.

Share this story...