With ISO 27001
You extend the scope of your management system to strengthen the privacy of the data you handle.
ISO/IEC 27701 · Privacy
ISO 27701: privacy information management
Build and improve your organization's personal data management by extending your ISO 27001 system.
What is ISO 27701?
An extension of ISO 27001 for personal data
ISO/IEC 27701 extends the requirements, controls and objectives of ISO 27001 to manage personally identifiable information.
It makes it easier to comply with data protection regulations such as the European GDPR and local laws, and adds controls for controllers and processors.
It applies to organizations of any size: public, private, governmental and nonprofit.
Starting point
Already have ISO 27001?
Without ISO 27001
You implement both standards together, because 27701 extends the requirements of 27001 and 27002.
Integrated system
If you already use the high-level structure (ISO 9001, 14001, 22301, 31000), you unify documents and avoid duplicating effort.
Structure
Eight clauses and six annexes
Clause 5 · Specific requirements
Extends clauses 4 to 10 of ISO 27001, especially context and risk planning.
Clause 6 · Specific guidance
Extends the ISO 27002 guidance and the ISO 27001 Annex A controls.
Clause 7 · Controllers (PII)
4 control objectives and 31 controls for PII controllers.
Clause 8 · Processors
4 control objectives and 18 controls for processors and subcontracting.
Annexes A and B
Privacy controls for controllers and processors.
Annexes C to F
Mappings to ISO/IEC 29100, GDPR, ISO/IEC 27018 and 29151, and ISO 27001/27002.
With 27701, “information security” becomes “information security and privacy”.
Credentials
Certified in ISO 27701, with accredited auditors
FAQ
What clients ask us most
What is ISO 27701?
The standard that defines a privacy information management system (PIMS) to protect the personal data an organization processes.
Do I need ISO 27001 to implement ISO 27701?
ISO 27701 was created as an extension of ISO 27001, so organizations that already have a certified ISMS can add it with much less effort.
Take your ISMS to the next level of privacy
We implement ISO 27701 alongside or on top of your ISO 27001.