ISO/IEC 27701

ISO/IEC 27701 is an international standard that extends an ISO 27001 information security management system to cover privacy, creating a privacy information management system.

What is ISO/IEC 27701?

Published in 2019 (drafted as ISO/IEC 27552), it sets out requirements and controls for organisations acting as controllers or processors of personal data, and maps them to laws such as the GDPR.

← Back to the A–Z definitions