Topic Hub

ISO 27701 Resources

Master ISO 27701 with comprehensive guides on Privacy Information Management Systems. From understanding PIMS fundamentals to certification—everything you need for privacy excellence as a controller or processor.

Get ISO 27701 Certified

What is ISO 27701?

ISO 27701 is the international standard for Privacy Information Management Systems (PIMS). It extends ISO 27001 and ISO 27002 to include privacy-specific requirements, providing a framework for organizations to manage personal data responsibly.

The standard addresses both PII Controller and PII Processor roles, with specific requirements and controls for each. It maps to GDPR and other privacy regulations, helping organizations demonstrate compliance.

  • Extension to ISO 27001—cannot be certified standalone
  • Covers both controller and processor privacy obligations
  • 31 controller-specific controls (Annex A)
  • 18 processor-specific controls (Annex B)
  • Direct mapping to GDPR requirements
49
Privacy-Specific Controls
GDPR
Regulatory Alignment
2025
Updated Version
Global
Privacy Framework

ISO 27701 Resources

Loading resources...