This Q&A explains whether you need consent to publish client case studies or testimonials on your website or in promotional material? It is intended for law firms and therefore covers obligations under the data protection regime as well as SRA requirements. However, the data protection guidance in this Q&A is of universal application to private sector commercial organisations.