AI-Driven Learning. Built to Scale.

Fit to Practise: CPD, Compliance & AI in Legal Services

Sarah Chen

In most sectors, training helps people do their jobs better. In legal and professional services, training is the job’s precondition. A solicitor, barrister, chartered accountant or chartered surveyor holds the right to practise only for as long as they can demonstrate continuing competence — and the firm around them holds its authorisation only while it can prove that every fee earner and support staff member has been trained on the obligations that govern regulated work. Here, “fit to practise” isn’t a slogan. It’s a standard tested by regulators, and the evidence that proves it is a training record.

The sector is as economically weighty as it is regulated. UK legal services alone employs 311,000 people, contributes £74.4 billion to the economy and exported £9.5 billion in 2023, with the number of legal professionals growing 3.4% in 2024 (Law Society, 2024). Add accountancy, consultancy and financial advice, and it exceeds a million people. This guide explains why L&D in the sector is uniquely demanding and what a modern approach looks like. The data throughout draws on our State of Legal & Professional Services Training Report 2026, worth reading in full if this is your responsibility.

Two layers of obligation, one firm

What makes this sector distinct is that it carries two overlapping training burdens at once. Every regulated professional has an individual CPD obligation as a condition of authorisation, enforced by a body with the power to suspend or remove their right to practise. And every firm has a whole-organisation compliance obligation — anti-money laundering, data protection, professional ethics — that applies to regulated and non-regulated staff alike. A single firm may contain solicitors under the SRA, barristers under the BSB, legal executives under CILEx, and accountants under the ICAEW and ACCA, each with different rules and recording standards, all sitting on top of the firm-wide baseline. Managing both layers, for every population, is the defining challenge.

Why legal and professional L&D is harder than almost anywhere else

Three forces combine to make this one of the most demanding learning environments in the country.

  • Individual regulatory CPD. Every regulated professional must maintain and evidence continuing competence as a condition of authorisation — the SRA Competence Statement for solicitors, the BSB Handbook for barristers, and verifiable annual hours for accountants — enforced by regulators who can withdraw the right to practise.
  • Firm-wide compliance. Beyond individual CPD, firms must train, refresh and evidence AML, data protection, anti-bribery, conflicts and cyber security for everyone in the organisation — reviewed by the SRA, HMRC and the FCA in supervision.
  • AI transformation and ethics. AI is reshaping legal and professional work faster than any prior technology, creating an urgent need for new technical skills and, critically, new ethical and regulatory awareness about using AI in regulated practice. Individually each would stretch any L&D function; together they demand training that is provable to multiple regulators, current with fast-moving guidance, and manageable across several professions at once.

The firm-wide compliance baseline

Before any individual CPD, a set of firm-wide obligations applies to every person in the organisation, and must be trained, refreshed and evidenced on defined cycles. In practice it spans:

  • Anti-money laundering and financial crime — mandatory AML/CTF training under the Money Laundering Regulations 2017 for all fee earners and relevant support staff, with annual refreshers, enhanced training for MLROs, plus suspicious activity reporting, client due diligence and sanctions screening. This is the single most common gap identified in SRA and HMRC supervision visits.
  • Data protection and confidentiality — annual UK GDPR and Data Protection Act 2018 training, legal professional privilege and confidentiality duties, information barriers, and cyber security awareness for a sector that is a prime target for fraud and ransomware.
  • Professional ethics and conduct — anti-bribery under the Bribery Act 2010 (where evidenced training underpins the “adequate procedures” defence), conflicts of interest, modern slavery awareness, and the SRA Code of Conduct principles. Miss or lapse any of these and the consequence isn’t an internal gap — it’s a supervision finding, an enforcement risk, and a mark against the firm’s professional indemnity position.

The CPD and competence maze

The individual layer is where the sector’s multi-profession complexity really bites, because each regulator records competence differently. A firm has to manage and evidence all of them simultaneously:

  • Solicitors (SRA) — since November 2016, the mandatory-hours model was replaced by the SRA Competence Statement, requiring role-appropriate training, reflection and a maintained record — placing more onus on the firm to show development is purposeful and evidenced.
  • Barristers (BSB) — CPD in line with the BSB Handbook, varying by call date and practice type, reviewed at practising-certificate renewal.
  • Accountants (ICAEW and ACCA) — a minimum of 40 verifiable CPD hours a year for ICAEW members, and 40 CPD units (at least 21 verifiable) for ACCA members, both requiring evidenced, role-relevant records on demand. When these obligations live in personal spreadsheets and professional-body portals, firm-level oversight disappears — and the gaps only surface when a regulator asks.

The SQE and trainee documentation challenge

The Solicitors Qualifying Examination, introduced in September 2021, is the biggest change to solicitor qualification in a generation — and it created a new firm-level documentation burden. Firms offering Qualifying Work Experience must be able to demonstrate that the experience genuinely developed the competencies in the SRA Competence Statement, which means maintaining records of the QWE provided, the supervision given, the competencies developed and the reflective learning documented for every candidate. Paper-based or ad-hoc systems will not survive scrutiny; firms accepting QWE candidates need a documented competency framework and an evidenced development trail from the outset.

AI in practice: the opportunity and the liability

AI is now embedded across legal and professional work — contract review and due diligence (tools like Harvey, Kira and Luminance), AI legal research, document drafting and financial analysis — and the UK has become a global LawTech hub, with more than 350 companies and £5.5 billion of investment. But the opportunity comes with sharp professional risk. Professionals owe a duty of competence when using AI, must understand hallucination and model limitations, face client-disclosure questions, and carry data-protection obligations when AI tools process client data. Crucially, when an AI-assisted output is wrong, the liability rests with the professional and the firm, not the software vendor. Training on responsible AI use — aligned to SRA guidance and the firm’s own AI governance policy — is now one of the sector’s most urgent and least-addressed needs.

The evidence problem

Underlying all of this is a single recurring question every regulator asks: can you prove it? When the SRA visits, when HMRC conducts an AML assessment, when the FCA reviews SM&CR training, or when the ICAEW audits CPD records, they want evidence — for named individuals — of what training was completed, when, and what it covered. In too many firms that evidence is fragmented: CPD in personal spreadsheets, AML in a separate compliance system, mandatory training in an LMS that talks to neither. The result is a frantic manual data-gathering exercise under time pressure, with the risk that gaps are exposed in the process. The firms that cope are the ones that have made all of it a single, queryable, exportable record.

How a modern, AI-native approach solves it

This is the gap that purpose-built Learning & Development for legal and professional services is designed to close. Rather than bending a generic system to fit, a single AI-native LMS/LXP brings CPD, compliance, SQE development and audit evidence into one place, built around how firms actually operate:

  • 200+ RoSPA and CPD-accredited courses covering the firm-wide baseline — AML/CTF, data protection, anti-bribery, cyber security, conflicts and more — deployable immediately, with the Worker Protection Act 2023 harassment duty reflected.
  • An AI course builder that turns a new SRA guidance note, an updated LSAG AML briefing, a revised risk assessment or an ICAEW technical bulletin into a structured, assessed course within days of publication — keeping pace with regulation, not lagging it.
  • Multi-body CPD tracking that accumulates ICAEW and ACCA verifiable hours, supports the SRA Competence Statement and BSB requirements, and maps SQE Qualifying Work Experience against the Competence Statement with timestamped evidence for every candidate.
  • Automated renewal management so AML and other annual training re-assigns itself before it lapses — closing the most common supervision gap — with 30/14/7-day alerts.
  • Regulator-ready evidence on demand — complete, timestamped records for any individual, team or practice area in under a minute, formatted for the SRA, HMRC, FCA and ICAEW, and usable as risk-management evidence for professional indemnity insurers.
  • 100+ language delivery for diverse professional services teams across multiple offices. The result is compliance and CPD that are continuous and provable to every regulator, AI risk that’s actively managed, and a lean L&D team able to turn a guidance change into deployed training the same week.

What “good” looks like — a quick checklist

If you’re assessing your own firm, answer these as a regulator would:

  1. If the SRA or HMRC asked for a named individual’s AML training evidence within 24 hours, could you produce it — and trust it’s complete?
  2. Do AML and other annual modules re-enrol automatically before they lapse?
  3. Is every regulated population’s CPD (SRA, BSB, ICAEW, ACCA) tracked at firm level, not just in personal spreadsheets?
  4. Do you have a documented QWE competency framework and evidence trail for every SQE candidate?
  5. Have professionals using AI tools been trained on the duty of competence and liability that comes with them?
  6. When guidance changes, can you build and deploy updated training within days? If several answers are “no,” the exposure cuts across regulatory, professional-indemnity and reputational risk at once.

See it built for your firm

The fastest way to grasp the difference is to see your own scenarios — an SRA AML evidence request, a multi-profession CPD return, an SQE cohort’s QWE tracking — running on a platform built for the sector. Book a demo and we’ll walk through it, or start a free trial and have real training live within days. For the full picture of the sector’s challenges and data, read the State of Legal & Professional Services Training Report 2026.

Frequently asked questions

What compliance training must every legal or professional firm deliver? A firm-wide baseline applies to all staff: anti-money laundering and financial crime (under the Money Laundering Regulations 2017), UK GDPR and data protection, anti-bribery (Bribery Act 2010), conflicts of interest, cyber security and — for relevant firms — modern slavery awareness. AML training in particular must be regular, documented and evidenced, and is reviewed by both the SRA and HMRC.

What are the CPD requirements for solicitors, barristers and accountants? Solicitors work to the SRA Competence Statement (role-appropriate training, reflection and a maintained record, rather than fixed hours since 2016); barristers complete CPD under the BSB Handbook; ICAEW members complete at least 40 verifiable CPD hours a year and ACCA members 40 CPD units (at least 21 verifiable). All require evidenced, role-relevant records available on demand.

How should firms evidence Qualifying Work Experience for the SQE? Firms need a documented competency framework mapped to the SRA Competence Statement, with records of the QWE provided, supervision given, competencies developed and reflective learning for each candidate — an evidenced trail that ad-hoc or paper systems can’t reliably provide.

Do professionals need training on AI tools like Harvey or Luminance? Yes. Professionals owe a duty of competence when using AI, must understand hallucination and model limitations, and remain liable for AI-assisted output — liability does not pass to the vendor. Training on responsible AI use, aligned to SRA guidance and the firm’s AI governance policy, is now essential before tools are relied upon.

How quickly can we produce records for an SRA or HMRC AML visit? With all training on one platform, complete, timestamped AML and compliance records for any individual — including assessment scores and content covered — can be produced in under a minute, turning a supervision request from a scramble into a routine export.

Can training be delivered to multilingual professional services teams? Yes — courses can be delivered with AI voiceovers in 100+ languages, so diverse teams across multiple offices receive consistent, high-quality compliance and CPD training.

Related Articles

FREE employee checklist
The Employee Induction Checklist: What to Cover, Why Most Inductions Fail, and a Free Template An induction is the structured…
Computer on a desk with a FREE 52-week toolbox talk planner on the screen
Toolbox Talks That Actually Work: A Practical Guide, a Free 52-Week Planner and a Ready-to-Deliver Talk A toolbox talk is…

Stay Updated with AI Learning Insights

Get the latest articles, research, and insights on AI-powered eLearning delivered directly to your inbox.