ANALYSIS: NY Is First to Require CLE on Cybersecurity, Privacy

New York-barred attorneys were notified last week that they’ll be required to complete one CLE credit hour of cybersecurity, privacy, and data protection training as part of their biennial learning requirement beginning July 1, 2023.

As the first jurisdiction to implement this specific requirement, New York is sending a strong reminder that lawyers have a duty of technical competence. As technology advances, so does the risk of data breaches. And attorneys—who have professional, ethical, and often contractual obligations to safeguard client information—must be aware of these risks.

One quarter of the respondents to a 2021 American Bar Association ...