thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

ISO/IEC 27701

International standard for a privacy information management system (PIMS), building on ISO/IEC 27001.

Definition

ISO/IEC 27701 specifies requirements and guidance for PII controllers and processors, mapping to GDPR and other laws. The 2019 edition was an extension to ISO 27001 and 27002; the 2025 edition restructured it as a standalone management system standard while remaining compatible with ISO 27001. Organizations can be certified.

Example

A SaaS processor adds ISO/IEC 27701 certification to demonstrate GDPR processor commitments.

Exam tip

27701 = privacy management system; 27018 = PII in public cloud guidance.

Related terms