Don’t do SECURITY. Do business SECURELY.
Threat intelInsightsBook a consultation
Back to all insights

ISO/IEC 27701:2019 published: privacy information management

ISO/IEC 27701 extends ISO/IEC 27001 and 27002 to cover privacy information management, supporting GDPR accountability.

ISO has published ISO/IEC 27701:2019, Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management.

The standard specifies requirements and guidance for establishing a Privacy Information Management System (PIMS) as an extension of an existing ISO/IEC 27001 information security management system.

Key features

  • Additional requirements and guidance for both PII controllers and PII processors.
  • Mapping annexes to the GDPR and other privacy frameworks.
  • Certification is available as an extension to ISO/IEC 27001 certification.

For organisations already certified to ISO/IEC 27001, ISO/IEC 27701 offers an efficient way to demonstrate privacy accountability to customers and regulators, building on controls and processes you already have.

Source: ISO/IEC 27701:2019 (ISO)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

Get our weekly insights by emailA free weekly threat and vulnerability round-up with a link to our threat log spreadsheet, plus legal, regulatory, standards, and AI updates.
Subscribe free

How we can help: consulting, auditing, and AI governance. Book a complimentary consultation.

More insights