ISO/IEC 27701

ISO/IEC 27701 is an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization. It has considered the mapping of GDPR clauses and other privacy-related standards from the very beginning. An authoritative guideline for the construction of a privacy management system. ISO/IEC 27701 provides guidelines for protecting personal privacy information, and supplements additional regulatory requirements to establish, implement, maintain, and continuously improve privacy information management within the scope of ISMS, reducing the risks faced by private information.