What is ISO 27701?

Implementing the ISO 27701 Privacy Information Management System (PIMS) will help your organization in meeting the regulatory requirements and effectively manage privacy risks associated with Personally Identifiable Information (PII). This standard is a privacy extension to ISO 27001 Information Security Management System (ISMS).

Why ISO 27701 certification?

Organizations can use ISO 27701 to demonstrate to consumers, external organisations and internal stakeholders, that mechanisms are in place to keep personal data safe and to comply with privacy laws.  

What are the benefits?

• Compliance with privacy regulations, such as the European Union General Data Protection Regulation (EU GDPR), and local privacy law & regulations, such as Personal Data Protection Act (PDPA) in Singapore.
• Demonstration to stakeholders and customers that you are maintaining the highest standards in managing privacy risks related to PII.
• Clear roles and responsibilities for PII controllers and PII processors, ensuring responsibility and accountability for PII processing.
• Reduction of risks associated with disruptions of critical processes and financial losses associated resulting from a privacy data breach.