ISO 27701 is the extension of ISO 27001 establishing requirements for a privacy information management system (PIMS).
ISO/IEC 27701:2019 specifies requirements and guidance for establishing a PIMS as an extension of ISO 27001 and ISO 27002. It applies to both PII controllers and processors and provides an auditable framework for complying with privacy regulations such as GDPR.
No. ISO 27701 is an extension that requires a certified or conformant ISO 27001 ISMS as a prerequisite.
No. It provides an auditable management framework facilitating compliance demonstration, but legal GDPR conformity requires specific legal assessment.
Need an assessment in this area?