Strengthen Your Privacy Management

Privacy is about more than protecting information. It is about demonstrating that your organisation manages personal information responsibly and has the systems in place to protect it. ISO/IEC 27701:2025 provides an internationally recognised framework for managing privacy risks and establishing a Privacy Information Management System (PIMS).

Request a Quote
Talk to an Expert

About the Standard

What Is ISO/IEC 27701?

ISO/IEC 27701:2025 is the international standard for Privacy Information Management Systems (PIMS). It provides requirements and guidance for organisations that collect, process, store or otherwise manage personally identifiable information (PII).

The standard helps organisations establish, implement, maintain and continually improve their privacy management practices. It addresses the responsibilities of both PII controllers and PII processors, helping organisations understand and manage the privacy risks associated with the personal information they handle.

ISO/IEC 27701 can also be integrated with ISO/IEC 27001, allowing organisations to build privacy management into an established information security framework.

Who Is ISO 27701 For?

ISO/IEC 27701 is suitable for organisations of any size or industry that process personally identifiable information.

It can be particularly valuable for organisations that:

  • Handle volumes of personal information.
  • Process personal information on behalf of clients or other organisations.
  • Need to demonstrate accountability for their privacy practices.
  • Operate across jurisdictions with different privacy requirements.
  • Want to strengthen customer, partner and stakeholder trust.
  • Already have an ISO/IEC 27001 Information Security Management System.

Value Beyond the Certificate

Benefits of ISO/IEC 27701 Certification

IISO/IEC 27701 certification helps organisations establish a more structured approach to privacy management.

Stronger privacy management

Establish clear processes for identifying, managing and reducing privacy risks.

Demonstrated accountability

Provide evidence that privacy responsibilities and controls are actively managed across the organisation.

Support for regulatory compliance

Help support compliance with applicable privacy legislation and regulations, including requirements such as the GDPR.

Greater stakeholder trust

Demonstrate to customers, employees, partners and regulators that personal information is handled responsibly.

Integration with information security

Build on an existing ISO/IEC 27001 management system and align information security and privacy practices.

Continual improvement

Establish a framework for monitoring, reviewing and improving privacy management over time.

The Applicable Standard

ISO/IEC 27701:2025 – Privacy Information Management Systems: Requirements and guidance

ISO/IEC 27701:2025 is the current edition of the international standard for Privacy Information Management Systems. It replaces ISO/IEC 27701:2019 and provides requirements and guidance for organisations responsible for processing personally identifiable information.

View More

Frequently Asked Questions

ISO/IEC 27701 certification demonstrates that an organisation has established a Privacy Information Management System that meets the requirements of the international standard. It provides a structured approach to managing privacy risks and personal information.

ISO/IEC 27701 is relevant to organisations that collect, use, store or process personal information, including both PII controllers and PII processors. It is particularly useful for organisations that need to demonstrate strong privacy governance and accountability.

Yes. ISO/IEC 27701 is designed to integrate with information security management systems and can be implemented alongside ISO/IEC 27001. Organisations with an established ISO/IEC 27001 system may already have many of the processes and controls needed to support their privacy management system.

No. ISO/IEC 27701 does not replace privacy legislation or guarantee compliance with a specific regulation. It provides a structured framework for managing privacy risks and demonstrating accountability, which can support an organisation’s compliance efforts.

ISO/IEC 27001 focuses on information security and the confidentiality, integrity and availability of information. ISO/IEC 27701 focuses specifically on privacy management and the protection of personally identifiable information. The two standards can work together to provide a broader approach to information security and privacy management.