The ISO/IEC 27701 2019 Standard
Almost every organisation holds PII (personally identifiable information).
This standard is ideal for organisations wishing to implement a PIMS that supports their ISMS objectives and helps meet their data privacy compliance requirements, such as those stipulated by the EU’s GDPR (General Data Protection Regulation) and the UK’s DPA (Data Protection Act) 2018.
Key features:
- The Standard includes mapping to the GDPR, ISO/IEC 29100, ISO/IEC 27018 and ISO/IEC 29151.
- Integrates with other management system standards, including the information security standard, ISO/IEC 27001.
- Provides PIMS-specific guidance for ISO/IEC 27002.
- Specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a PIMS.
- Supports compliance with the GDPR and DPA 2018.
- Provides guidance for data controllers and processors responsible for processing personal data.
Important:
ISO/IEC 27701 supports an established ISMS aligned to ISO/IEC 27001, because it extends the requirements outlined in ISO/IEC 27001.
If you do not have an ISO 27001-compliant ISMS, we recommend you purchase BS 10012:2017 for your PIMS, as it doesn’t depend on an already-established ISMS.
Multi-user licences
If you are interested in purchasing a multi-user licence for this standard, please get in touch with us to discuss your requirements. You will receive a watermarked PDF which you will be able to store on an internal network, with access restricted to the predefined number of simultaneous users. Purchasing a multiuser licence grants you permission to print copies of the standard, up to the specified number of users.
