ISO/IEC 27701 is an extension of management standards for ISO/IEC 27001 and ISO/IEC 27002. Its goal is to enhance the existing Information Security Management System (ISMS) through new requirements to establish, implement, maintain and continuously improve the Privacy Information Management System (PIMS). The standard outlines the framework applicable to personally identifiable information (PII) controllers and PII processors to reduce personal privacy risks.

With the continuous development of information technology, the community’s concern for privacy security is increasing, many countries and regions have set up a series of personal information protection laws and regulations, such as the GDPR in European Union (EU), the California Consumer Privacy Act (CCPA), the Personal Data Protection Act 2012 (PDPA) in Singapore and the Personal Data (Privacy) Ordinance in Hong Kong. Companies and organizations need a comprehensive system to ensure the privacy security of customers and stakeholders when handling personal information and data.

We can help you to verify that you are complied with the ISO/IEC 27701:2019 standard efficiently and cost effectively. Contact us now to find out more.