What is ISO/IEC 27701?

ISO/IEC 27701 is an international standard that provides guidance for establishing, implementing, maintaining, and continually improving a Privacy Information Management System (PIMS) based on ISO/IEC 27001 (Information Security Management) and ISO/IEC 27002 (Security Controls). It specifies requirements and provides guidance for Personally Identifiable Information (PII) controllers and PII processors responsible for PII processing within an organization. It is commonly used to extend an existing ISMS to incorporate privacy management and demonstrate compliance with privacy regulations like GDPR.