News Release

Locke Lord Among First Law Firms to Earn ISO 27701 Certification for Excellent Privacy Information Management System

June 30, 2020

June 30, 2020 – Recognizing the growing importance of information security and privacy to our clients, Locke Lord is pleased to announce it has earned the ISO/IEC 27701:2019 certification for its Privacy Information Management System (PIMS). Locke Lord is among a select group of law firms to achieve this certification, an international standard introduced in 2019 that defines a framework of policies, processes and controls to safeguard the privacy rights of individuals.

ISO/IEC 27701:2019 is the latest ISO certification achieved by the Firm. In prior years, it attained ISO/IEC 27001:2013, a prerequisite for the new ISO privacy certification.

“These certifications are a reflection of the strong emphasis Locke Lord places on information security, privacy and protecting client data in the Firm’s day-to-day operations,” said Andy Sawyer, Chief of Security and Facilities at Locke Lord. “More than just technical achievements, the certifications require demonstrable evidence of continual security and privacy systems and practice improvements, which we have displayed over the past several years. Our attorneys and staff receive ongoing information security and privacy best practices training, a critical requirement for this distinction.”

The goal of a PIMS is to enhance the existing Information Security Management System (ISMS) with additional requirements in order to establish, implement, maintain and continually improve privacy processes and controls. The Locke Lord ISMS is a framework of processes and control specifications to manage the ‎Firm’s Document Management Service (DMS), Email Management Service (EMS), Remote ‎Access Service (RAS), Client Share Service (CSS), Mobile Device Management Service ‎‎(MDMS), Litigation Support Service (LSS) and Active Directory and Management Service (ADMS). The Locke Lord PIMS builds upon the ISMS and is a framework of processes and control specifications to manage the Firm’s Data Pool Service (DPS), Human Resources Information Systems Service (HRISS), Marketing Systems ‎Service (MSS) and Accounting/Finance/Tax Systems Service (AFTSS)‎.

Locke Lord was certified by Professional Evaluation and Certification Board (PECB), a global ‎provider of training, examination, audit and certification services. The Firm’s systems and ‎practices are audited and confirmed annually.‎


About Locke Lord LLP
Locke Lord is a full-service law firm with global reach and 21 offices designed to meet clients’ needs in the United States and around the world. The Firm has a history that spans more than 130 years and is a leader in the middle market arena. Locke Lord focuses on providing the highest levels of commitment, quality and service to clients across its five Key Sectors: Energy and Infrastructure; Finance and Financial Services; Insurance and Reinsurance; Pharmaceutical; and Private Equity. In addition, the Firm advises clients across a broad spectrum of other industries, including fund formation, venture capital, health care, public finance, real estate, technology, cybersecurity and white collar, while providing a wealth of experience through its complex litigation, intellectual property, tax, regulatory and transactional teams.