Protect. Comply. Certify.
ISO/IEC 27701
Get ISO/IEC 27701 certification to implement a structured, risk-based approach to Privacy Information Management System.
Understanding ISO/IEC 27701
As a standalone Privacy Information Management System (PIMS) standard, ISO/IEC 27701 defines specific governance, operational, and risk management requirements for handling PII. It aligns with international privacy laws, ensuring organisations establish robust privacy controls, whether they function as PII controllers or processors.
ISO/IEC 27701 was originally introduced as a privacy extension to ISO/IEC 27001, providing a structured approach to managing Personally Identifiable Information (PII). However, with a significant shift in privacy information management, from March 2025 onwards, ISO/IEC 27701 will be a standalone standard, independent of ISO/IEC 27001. This transition reflects the growing complexity of global privacy regulations and the need for dedicated privacy governance frameworks beyond traditional information security controls.
Key Aspects
Privacy Information Management System (PIMS)
ISO/IEC 27701 establishes a structured framework for managing personally identifiable information (PII). It defines governance policies, accountability measures, and operational controls to ensure data privacy while integrating seamlessly with broader information security management.
PII Controllers & PII Processors Responsibilities
Privacy Risk and Impact Assessments
Global Regulatory Alignment & Compliance
Who Needs ISO/IEC 27701 Certification?
Organisations that collect, process, or store Personally Identifiable Information (PII) can benefit from ISO/IEC 27701 certification.
Certification, Simplified
Our assessment verify that your management systems comply with the international standards while aligning with your business objectives.
Need to Know
More?
From understanding the scope and requirements to uncovering the benefits that certification brings to your organisation, we’ve got you covered.
We’ve gathered answers to the most frequently asked questions, providing you with clear insights and guidance every step of the way. Whether you’re new to certification or looking for more specific information, our comprehensive FAQ will ensure you have the knowledge you need to make informed decisions and move forward with confidence.
Is ISO/IEC 27701 still dependent on ISO/IEC 27001?
No. ISO/IEC 27701 is now a standalone standard. While it was initially an extension of ISO/IEC 27001, it has evolved to function independently.
How does ISO/IEC 27701 support GDPR compliance?
What is the difference between a PII Controller and a PII Processor under ISO/IEC 27701?
How long does ISO/IEC 27701 certification take?
What is the certification validity period?
Simplifying Certification
Learn how RACERT supports your journey with a structured and clear certification process.
Global Standards
Explore internationally recognised ISO and IEC standards that fits your industry and business goals.