Privacy & security
ISO/IEC 27701
ISO/IEC 27701 — Privacy Information Management System
ISO / IECLatest · 2025 (Edition 2, 2025-10; replaces 2019)
Edition last checked against publisher sources:
Scope
A privacy information management system (PIMS) standard with requirements and guidance for organizations acting as PII controllers or processors. The 2019 edition was an extension to ISO/IEC 27001; the 2025 edition is a standalone management-system standard that can still be integrated with 27001. Referenced by hospitals building privacy-management programs beyond HIPAA's baseline.
Where it applies in the room
- Privacy governance and controller/processor roles
- Third-party data-processing arrangements
Source & further reading
- · ISO/IEC 27701:2025 — publisher
- · ISO/IEC 27701:2019 (withdrawn) — publisher
Also known as
- ISO/IEC 27701:2025
- ISO/IEC 27701:2019
- ISO/IEC 27701
- ISO 27701
Help us improve
Spotted something wrong, outdated, or unclear? Let the editors know.
Cited in