SRA compliance: law firm prospecting software checks

What to take away

How SRA compliance rules shape prospecting work

The SRA regulates solicitors in England and Wales through the SRA Principles and the SRA Code of Conduct for Solicitors, RELs and RFLs. Principle 4 requires you to act with honesty and Principle 2 to uphold public trust in the profession, while paragraph 8.7 of the Code requires that publicity relating to your practice is accurate and not misleading. The SRA Transparency Rules set out what firms must publish about services, prices and complaints. Prospecting sits inside those duties: a targeted email that overstates an accreditation, or a LinkedIn message that implies a specialism the firm does not hold, is a regulatory problem, not just a marketing one.

Practical rules follow. Keep claims specific and evidence-based. Record who approved a list and a message, and when. Route anything new past your compliance officer for finance and administration (COFA) or your practice's nominated compliance lead before the first send.

The rulebook varies by jurisdiction and profession. The SRA regulates solicitors in England and Wales; Scotland and Northern Ireland have their own law societies. Licensed conveyancers answer to the Council for Licensed Conveyancers. Take advice from a qualified compliance adviser on your own arrangements.

Authority checks come before tool selection. Confirm that your firm, and every fee-earner you name in a campaign, appears on the SRA's register of regulated firms and solicitors, which records practising certificate status and any conditions. Check the ICO's data protection fee register to confirm your firm's entry, because a firm that processes personal data must pay the data protection fee unless an exemption applies.

For provenance, work from public registers rather than scraped lists: Companies House for company and director detail, and the SRA register and the Law Society's Find a Solicitor for who is authorised to practise where. If a vendor cannot tie a record back to one of these, treat the record as unverified.

Features worth paying for

Most prospecting tools are built for technology sales. Law firms need a narrower set of capabilities.

Beyond the basics, the capabilities that separate a legal-ready tool from a generic sales platform are conflict screening against your existing clients and matters, audit logs you can export for your compliance file, tagging that keeps matter-level detail out of the prospecting layer, and suppression handling that records opt-outs and objections automatically. Ask each vendor to demonstrate them rather than describe them, and put the same questions to the system you already run — a legal practice management suite such as Clio, Actionstep or LEAP, or a general CRM such as HubSpot or Pipedrive — before you add another layer.

Data provenance is the one buyers most often overlook. If a vendor cannot tell you the source and refresh date of a record, you cannot meet your accountability obligations when someone asks, and the ICO's UK GDPR guidance explains what accountability means in practice. Ask the question of every supplier you buy contact data from, whether that is a UK-focused provider such as Cognism or a wider platform such as Lusha or Apollo.

Data protection and confidentiality

Prospecting data is personal data whenever it identifies a living individual, including a sole trader or a named employee. Lawful basis, storage limitation and data subject rights all apply. The Data Protection Act 2018 sits alongside the UK GDPR, which was retained in UK law when the Brexit transition period ended on 31 December 2020.

Electronic marketing to business contacts is covered by PECR, not just the GDPR. Corporate subscribers get slightly more latitude, but the ICO's direct marketing guidance still expects a clear opt-out, accurate sender identity and prompt suppression.

Confidentiality is the harder edge. Client names, matter details and the existence of a relationship are confidential in most engagements. Never upload a client list into a prospecting tool to find lookalikes. Use firm-level data from public registers instead; our guide to prospecting software data sources explains which UK sources are usable.

Choosing a platform: a short sequence

Where legal directories fit

Chambers and Legal 500 research is a prospecting channel in its own right. Their rankings and named individuals give you a public list of who is active in a sector. Software helps you track submission deadlines, referee requests and ranking changes year on year.

Pair directory research with a narrower outbound motion. A ranked practice area plus a recent deal announcement is a better trigger than a scraped job title. If your outbound is largely email, compare tools against the criteria we set out for cold email prospecting software.

Common questions

How does the SRA affect prospecting?

The SRA requires accurate, non-misleading publicity and honest dealing with clients: Principle 4, paragraph 8.7 of the Code of Conduct for Solicitors, RELs and RFLs, and the SRA Transparency Rules on published services, prices and complaints information. Apply the same standard to a cold email as to a website page, and keep evidence for any claim.

Can we cold email other businesses?

Usually yes, but PECR regulation 22 still applies to business-to-business electronic marketing, and corporate subscribers can object at any time. Include a clear opt-out and suppress objectors promptly.

Do we need a legal-specific tool?

Not always, but general sales platforms rarely provide conflict screening or matter-level confidentiality tagging. If your work is mostly consumer-facing, a general platform plus strict data rules may be enough.

Who should sign off a prospecting campaign?

Someone with compliance responsibility, normally your COFA or a nominated compliance lead, should approve the list source, message and suppression process.