The Data (Use and Access) Act (DUAA) is less about new rules and more about new expectations. For law firms, it sharpens regulatory focus around technology, marketing and accountability - with meaningful implications for risk management and professional credibility.