Law Office Technology
This domain tests whether you can adopt technology without breaching confidentiality, data protection or evidence rules. Questions tend to be scenario-based: a laptop is lost, a junior uses a personal messaging app for case discussions, or a firm moves its files to a foreign cloud provider.
The legal framework
- Electronic Transactions Act 2008 (Act 772) gives legal effect to electronic records and signatures and underpins e-filing and electronic service where courts operate them. Check the specific court's practice direction before relying on electronic filing.
- Evidence Act 1975 (NRCD 323) governs the admissibility and proof of electronic records, including authenticity and integrity.
- Data Protection Act 2012 (Act 843): register as a data controller with the Data Protection Commission, process personal data lawfully and securely, respect data subject rights, and handle breaches. The Cybersecurity Act 2020 (Act 1038) adds security and incident obligations.
Controls worth having
- Practice management system with conflict checks, diary and limitation alerts.
- Document management with versioning and a single master copy.
- Encryption at rest and in transit, multi-factor authentication, role-based access.
- Backups tested, plus a written business continuity plan.
- Device policy for personal phones and laptops: encryption, remote wipe, no client files in personal storage.
Worked example
A firm migrates to a cloud provider abroad. Reasoning: conduct a risk assessment; sign a data processing agreement; establish where data will be stored and who can access it; enable encryption and multi-factor authentication; train staff; update the Data Protection Commission registration; prohibit personal messaging apps for case discussion; and record the decision on file so the firm can show it acted reasonably if challenged.
Traps that cost marks
Assuming deleting an email deletes every copy. Sending a client's file by a public link rather than a controlled share. Using unlicensed software on client documents. Forgetting to strip metadata before sending a document to an opponent. Letting a generative AI tool ingest client confidences.