In this article, Antony Wells explores the why building a strong governance plan before executing strategies benefits law firms.
This article also explores the positive aspects of having strong data and solid information governance when realising AI ambitions for legal firms.
Across Australian law firms, there is broad agreement that information governance matters. Partners understand the risks associated with uncontrolled data growth. IT leaders see the operational strain of storage sprawl and inconsistent retention. Risk teams are aware of increasing scrutiny from clients and regulators. And executive management knows that AI ambitions cannot be realised on top of unmanaged information.
Yet despite this awareness, many firms remain in a holding pattern.
Policies exist. Conversations happen. Committees meet. But progress stalls between intention and execution.
The problem is rarely a lack of commitment. It is usually a lack of a strategy that feels achievable.
Why governance strategies stall
In mid-sized and even larger Australian firms, governance initiatives often falter for predictable reasons:
- They feel too large to tackle in one piece.
- Ownership is unclear.
- The work competes with billable priorities.
- The proposed “end state” seems disconnected from current reality.
- There is concern about disruption.
Governance quickly becomes framed as a transformation programme rather than an operational discipline. That framing alone can be enough to delay action.
The firms that make progress approach governance differently. They do not attempt to design a perfect future-state model. They design a practical plan that reflects how their firm actually operates.
Start with maturity, not ambition
The first step in building a workable information governance strategy is understanding your starting point.
Where is information stored?
How consistent are retention practices?
Who owns disposal decisions?
What evidence could you provide today if a major client requested assurance?
How exposed are you to a large-scale discovery exercise?
For many firms, the answers reveal uneven maturity rather than total absence of governance. Some practice groups may operate with discipline; others may rely heavily on individual behaviour. Email retention may differ from document management practices. Legacy repositories may remain largely untouched.
A realistic strategy acknowledges these inconsistencies and prioritises them.
Rather than aiming for “complete governance maturity,” firms should identify:
- Areas of highest legal and regulatory risk
- Areas of greatest cost exposure
- Areas most likely to be scrutinised by clients
- Areas critical to AI readiness
This approach reduces overwhelm and creates momentum.
Designing a phased approach
Australian firms operate in a competitive and regulated environment. The Privacy Act, evolving data breach expectations, increasing client due diligence, and sector-specific obligations (including APRA requirements for some clients) all contribute to governance pressure.
However, responding to all of this at once is unrealistic.
A phased strategy typically follows a sequence such as:
-
Establish baseline understanding of information volumes, repositories, and retention practices. Identify redundant, obsolete, and trivial (ROT) data. Map major risk exposures.
-
Review and rationalise retention schedules. Align policy to actual workflows rather than theoretical models. Clarify ownership for disposal decisions.
-
Introduce mechanisms to apply retention and classification rules consistently across systems. Define reporting and monitoring processes.
-
Establish defensible disposal processes. Develop audit-ready reporting. Review governance effectiveness regularly.
Each phase delivers measurable outcomes. None requires a full-scale transformation
Strategy must reflect operating reality
A common mistake is borrowing governance models from global firms without considering structural differences.
Mid-sized Australian firms often operate with leaner operational teams. Governance cannot rely on large compliance departments or standalone governance officers. Instead, it must operate through shared responsibility.
That means:
-
IT supports technical execution.
-
Records teams guide retention logic.
-
Risk teams align policy to regulatory obligations.
-
Practice management reinforces behavioural consistency.
A strategy that assumes new headcount is rarely approved. A strategy that redistributes clarity and accountability is far more realistic.
Align governance to business priorities
Governance strategies succeed when they are connected to immediate business objectives.
For some firms, that priority may be cost control. Storage growth and cloud migration expenses are tangible pressures. Reducing data volumes through disciplined retention can produce measurable savings.
For others, client assurance is the driver. Increasingly, Australian and international clients expect evidence of data management discipline. Being able to demonstrate structured governance can strengthen competitive positioning.
For firms investing in AI, governance becomes foundational. AI systems are only as reliable as the data they draw from. Poor data quality undermines innovation.
By explicitly aligning governance phases to these priorities, the strategy becomes commercially relevant rather than compliance-driven.
Avoid the “Big Bang” trap
There is a temptation to launch governance initiatives as large, highly visible programmes. This can create short-term attention but long-term fatigue.
Instead, governance should be embedded incrementally. Early wins — such as reducing a legacy archive or implementing consistent retention in a high-risk area — build credibility.
Success becomes cumulative.
Make strategy measurable
An effective governance strategy includes metrics from the outset. These might include:
- Reduction in total data volume
- Percentage of repositories aligned to retention policy
- Time to respond to information requests
- Audit findings and remediation timelines
- Disposal volumes over defined periods
Measurement transforms governance from aspiration into management discipline.
From intention to action
The shift from intention to strategy is not about complexity. It is about structure.
Australian firms do not need theoretical frameworks or external benchmarks to begin. They need:
- Clear visibility into current information holdings
- Defined governance priorities
- Phased, realistic sequencing
- Shared ownership
- Measurable outcomes
When governance strategy is grounded in operational reality and aligned to firm priorities, it becomes deliverable.
And once strategy becomes deliverable, execution becomes possible.
Read the other articles in this series by clicking the button below.
About the author
Antony Wells is a seasoned professional committed to helping organisations optimise their information management responsibilities. In his role as Commercial Director, EMEA at LegalRM, Antony leads initiatives aimed at enhancing firms' information governance strategies, with a keen focus on compliance, risk mitigation, and cost reduction.
Before joining LegalRM, Antony amassed invaluable experience guiding firms in selecting and implementing document management solutions, throughout the legal and professional services market.
To get in touch with Antony to discuss how we could help you with your information governance strategy connect on Linkedin.
Originally published in Australia.