ISO 27701:2019 GDPR

ISO/IEC 27701:2019 is a data privacy extension to ISO 27001. This recently published information security standard provides guidance for organizations seeking to implement systems to maintain compliance with the GDPR and other data privacy requirements. ISO 27701, also abbreviated as PIMS (Privacy Information Management System), outlines a framework for controllers of personally identifiable information (PII) and processors of PII to manage the privacy of data. Privacy information management systems are sometimes referred to as personal information management systems.

This reduces the risk to the privacy rights of individuals and to the organization by improving an existing information security management system.

This standard is a great way to demonstrate to customers, external stakeholders and internal stakeholders that effective systems are in place to maintain compliance with GDPR and other related privacy legislation. In the gov.uk Cybersecurity Breach Survey 2019, around 30 percent of businesses had made cybersecurity changes due to GDPR, and this number is set to grow in the coming years.

Organizations seeking to become certified to ISO 27701 to comply with GDPR will need to either have an existing ISO 27001 certification or implement ISO 27001 and ISO 27701 together as a single implementation audit. ISO 27701 is a natural extension of the requirements and guidance set out in ISO 27001.

The ISO 27001 standard provides a framework for information security management systems (ISMS) that enables the ongoing confidentiality, integrity and availability of information, as well as legal compliance. More than 60,000 organizations worldwide have certified to ISO 27001 to date, proving that certification is an essential part of protecting your most important assets.

We offer a comprehensive third-party audit service, assessing your current compliance and identifying potential areas for continuous improvement. We provide expertise and experience in ISO 27701 audits to ensure our clients receive thorough, rigorous, supportive and consistent audits.