ISO 27701 Certification

The ISO 27701 standard is an extension to the ISO 27001 (information security management) standard. It defines the requirements for implementing a Privacy Information Management System (PIMS).

With so many data privacy laws and regulations across the world, it can be difficult for organisations to understand what their requirements are. ISO 27701 has been developed as a global standard that organisations can adopt to address their disparate international privacy obligations.

ISO 27701 is particularly relevant for organisations subject to European GDPR legislation. A mapping from ISO 27701 to GDPR is provided in an Annex of the Standard.

Certifications to ISO 27701 are now available. Certification provides assurance that an organisation has implemented an internationally recognised Privacy Information Management System to protect their customers’ personal information.

With many years of information security, privacy and GDPR experience, we are well placed to help you implement ISO 27701 and achieve certification.