thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

ISO/IEC 27018

Code of practice for protecting PII in public clouds acting as PII processors.

Definition

ISO/IEC 27018 provides controls for cloud providers processing PII on behalf of customers, such as not using data for marketing without consent, disclosure of sub-processors, and support for data subject rights. It aligns with privacy principles from ISO/IEC 29100.

Example

A public cloud provider certifies against ISO 27001 with 27018 controls to reassure EU customers.

Exam tip

Pick 27018 when the scenario involves a cloud provider as PII processor.

Related terms