ISO 27701

Our ISO 27701 consultants are helping clients expand their Information Security Management System (ISMS) to include additional privacy controls that can help with GDPR Compliance.

ISO 27701 is an international standard that gives guidance on the protection of privacy. It is implemented as an extension to ISO 27001, the international standard for information security, by providing additional privacy controls and clause requirements within your ISMS framework.

The standard also lists applicable controls for both PII Controllers and PII Processors. Organisations can be both a controller and a processor of PII. Applying the additional controls of ISO 27701 can help your organisation create a Privacy Information Management System, or (PIMS). ISO 27701 can be certified by some ISO certification bodies as an extension to the scope of your ISO 27001 management system.

What are the Benefits of ISO 27701?

Since the GDPR and the revised Data Protection Act 2018, focus on protecting the privacy of personal identifiable information (PII) has increased dramatically, with potential fines higher than ever. Companies that store or process PII need to demonstrate compliance with privacy laws wherever they operate and this international standard can be used to apply additional controls within your established ISMS framework.

Other benefits of ISO 27701 include:

• Assisting with your GDPR and Data Protection Act Compliance.
• Assisting with compliance to other Privacy Legislation around the World.
• Building trust with the data subjects whose information you handle.
• Publicly demonstrate your commitment to privacy protection through independent certification.