ISO/IEC 27701:2025

Information security, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance

ISO/IEC 27701 is an international standard that sets out requirements for establishing, implementing, maintaining, and continually improving a Privacy Information Management System (PIMS).
It also provides guidance to support organisations in putting these requirements into practice.
The standard is designed for personally identifiable information (PII) controllers and processors, who hold responsibility and accountability for processing PII.