Legal and Governance departments account for 19.5% of all AI hours, with 81% of that use occurring on enterprise plans.

67% of General Counsels report spending more time on enterprise-wide risk and compliance than a year ago.

52% of senior legal leaders report significant or measurable efficiency improvements from AI tools in the last six months, while 48% report no meaningful improvement.

A quarter of legal leaders spend up to 60% of their time on enterprise-wide risk and compliance.

General Counsels cite these top drivers of risk: geopolitical conflicts 52%, regulatory changes 48%, AI-related risks 39%, cyber threats 39%, and supply chain disruptions 33%.

48% of General Counsels say AI's impact hasn’t fully materialized yet.

Nearly half of legal leaders devote up to 40% of their workload to enterprise-wide risk and compliance.

79% of General Counsels lack confidence that current board reporting strikes the right balance between clarity and overload.

Only 19% say their organization’s GRC systems are fully integrated, 65% say they are somewhat integrated, and 16% report no integration at all.

59% of respondents lack confidence they can quickly locate communications data for regulatory or legal requirements.

The legal sector recorded 79 attacks, its highest level yet, in Q3 2025.

85% of UK IT leaders in the legal sector report exposure to email-related incidents.

60% of organizations in the legal sector experienced email incidents, yet only 41% feel very confident in their compliance posture.

31% of organizations are currently facing legal consequences as a result of a mobile app security breach.

Only 12% of companies feel "completely prepared" to address the global patchwork of data privacy laws.

33% of respondents were subjected to legal or regulatory consequences due to compromised data as a result of device theft.