ISO/IEC 27701:2025 is the latest international edition for privacy information management systems (PIMS). The standard builds on good information security practices and links them directly to personal data protection requirements – such as the GDPR and other national and sector-specific regulations.

Unlike the previous 2019 version, the new edition is structured as a standalone management system standard and can be applied on its own or in combination with ISO/IEC 27001. It helps organisations systematically define roles (controller/processor), privacy risks and appropriate technical and organisational measures.

By implementing and certifying to ISO/IEC 27701:2025, organisations:

• demonstrate compliance and accountability to regulators, clients and partners;
• reduce the risk of incidents and breaches involving personal data;
• gain a structured approach to integrating privacy into their processes and information systems;
• increase trust in their brand and services.