Statutory guidance

Legal Aid Agency data security requirements

Guidance for legal aid providers on secure handling of personal documents and data.

Applies to England and Wales

Documents

Provider Data Security Requirements September 2024

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email web.comments@justice.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Provider Data Security Guidance September 2024

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email web.comments@justice.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

The purposes of the Legal Aid Agency (LAA) processes around handling personal data are set out in the ‘handling personal data and documents’ notification.

The ‘removable media guidance’ explain our shared legal responsibilities when sending removable media in support of applications and bills.

As a legal aid provider you must assure the LAA that you take every reasonable and appropriate measure to safely maintain the data you process.

Updates to this page

Published 1 June 2014
Last updated 25 March 2025 + show all updates
  1. Two new data security documents added.

  2. Data Security Guidance updated for the EU Exit.

  3. New guidance sets out legal requirements when sending encrypted removable media in support of applications and bills

  4. A note added to the page stating the LAA Data Security Requirements Guidance will be updated shortly. The old data security requirements document was removed.

  5. Guidance updated.

  6. 'Handling personal data and documents data security guidance' and 'Handling personal data and documents data security requirements' added to page.

  7. First published.

Sign up for emails or print this page