Jones Day Hacked Twice in Five Years: Why Perimeter Security Alone Fails Law Firms On April 6th, Jones Day confirmed that a cybercriminal group called Silent had breached the firm and accessed files belonging to ten clients. The data had already been posted to a dark web leak site a week earlier. All impacted clients have been notified, though their identities remain undisclosed. This is the second time Jones Day has had client data exfiltrated by hackers. The first was in 2021, when the...

Asking your employer for a copy of "all my personal data" sounds simple enough. In practice, it's the compliance equivalent of asking someone to empty every drawer, folder, inbox, and backup tape in the building, then hand you a neatly organised package within a calendar month. For HR teams and Data Protection Officers, the Data Subject Access Request (DSAR) has become one of the most resource-intensive obligations under GDPR.

The hidden cost of Zero Data Retention in legal AI: why ZDR economics break down in agentic workflows, and what law firms should do instead. I have been thinking about Zero Data Retention, and I think I've found the bit nobody wants to talk about. Two bits, actually. The first is that it's about to become ruinously expensive. The second is that even if you could afford it, it probably doesn't protect you from the thing you should actually be worried about. Let me take those in order, because...