ISO/IEC 27701
Certification ISO/IEC 27701 – Privacy (PIMS)
Structured management of personal data, extending 27001.
What the standard is
ISO/IEC 27701 — Privacy information management system (PIMS) – Requirements
ISO/IEC 27701 defines the requirements for a Privacy Information Management System (PIMS). In its 2019 edition it was designed as the privacy extension of ISO/IEC 27001, adding requirements and controls to the information security management system to establish, implement, maintain and improve a PIMS.
The standard sets out the framework within which controllers (including joint controllers) and processors (including those using sub-processors) manage personally identifiable information (PII), reducing privacy risks for the individuals concerned.
The applicable edition and certification approach (extension of ISO/IEC 27001 or standalone system) are defined in the offer. The PIMS scope may require a review of the ISMS scope. Certification supports, but does not replace, GDPR compliance.
Availability and accredited scope for each standard and sector are confirmed in the offer.
Benefits
- Clear privacy roles between controller and processor
- Supports organising privacy obligations
- Integrates with the existing security system
How certification works
Request and offer, Stage 1 audit (documentation) and Stage 2 (system effectiveness), independent certification decision, then annual surveillance and three-year renewal.
See the full processDocuments typically requested before Stage 1
- Description of the management system and scope
- Up-to-date company registration extract
- Results of the latest internal audit
- Management review minutes
Frequently asked questions
Is ISO/IEC 27001 a prerequisite?+
In its extension form, yes: the PIMS builds on an ISMS conforming to 27001. We confirm the set-up during the quotation stage.
Does certification equal GDPR compliance?+
No. It is a useful management tool but does not replace GDPR assessments or authority decisions.
Can 27001 and 27701 be audited together?+
Yes, audits can be planned in an integrated way.
Request a quote for ISO/IEC 27701
Related standards
Request a free quote
Tell us about your company: we will send a clear, no-obligation offer.