Yes, at least one state — New York — requires a dedicated CLE credit in cybersecurity, privacy, and data protection. Other states are moving toward similar mandates through broader “technology CLE” requirements.
Current Cybersecurity CLE Requirements
- New York: Attorneys must complete 1 credit in cybersecurity, privacy, and data protection as part of their biennial CLE cycle (effective July 1, 2023).
- Florida: Requires 3 technology-related CLE credits every three-year cycle, which may include cybersecurity training.
- North Carolina: Requires 1 technology CLE credit annually, and cybersecurity courses may satisfy this requirement.
- New Jersey: Beginning in April 2025, attorneys must complete 1 technology CLE credit per biennial cycle, potentially including cybersecurity content.
Practical Implications
- Cybersecurity CLE is not yet universal but is becoming more common as part of broader technology-competence rules.
- Attorneys should confirm whether their state recognizes cybersecurity as a standalone requirement or as part of technology or ethics credits.
- Sprout Education tracks emerging CLE categories like cybersecurity and ensures attorneys meet both current and new compliance standards.
Key Takeaway: Cybersecurity CLE is required in New York and may be covered under technology CLE in states like Florida, North Carolina, and New Jersey, but it is not yet a universal mandate.