GDPR for law firms
GDPR tools built in, not bolted on.
A subject access request can mean days of searching inboxes and folders. In OpLegal, the personal data you hold is already organised by person and matter, so data rights requests are handled inside the system you use every day.
Data rights requests, start to finish
- Record a request, confirm who's asking, and track the deadline.
- Subject access: OpLegal finds the person's data across clients, matters and documents, and prepares the letter, a summary and the pack, shared by a secure link.
- Corrections, restriction of processing and objections, including telling others who've had the data.
- Erasure, with a review: records the law requires you to keep, such as anti-money laundering records, are held back for your MLRO to decide.
Retention and deletion
- Matters are archived when they close, and reviewed when your retention period ends.
- Legal holds keep a matter when it's needed for longer.
- What's due for deletion is listed in a report; deleted items go to a recycle bin first and can be restored before they're deleted for good.
Records you can show
- A Record of Processing, built from what OpLegal actually holds.
- A full audit trail: who did what, and when.
- A log for personal data breaches.
- Your privacy notice for clients, linked from the portal.
Where your data lives
Your firm's data is stored in London, encrypted when it's sent and when it's stored, and kept separate from every other firm's data at database level.
Common questions
Can OpLegal handle subject access requests?
Yes. It finds the person's data across the system and prepares the letter, a summary and the pack to share securely.
What about data we must keep, like AML records?
Erasure requests are reviewed, and records the law requires you to keep are held back for your MLRO's decision.
Where is our data stored?
In London: the database and the documents.
Is there an audit trail?
Yes. OpLegal records who did what, and when, across matters and requests.
See it on a matter like yours.
From £299 per firm per month + VAT, the introductory price for pilot firms.