ISO 27701 Paves the Way for a Strategic Approach to Privacy

guest · Sep 1, 2020

ISO 27701: UKAS requirements for ISMS certification bodies
August 20, 2020
https://www.itgovernance.co.uk/blog/iso-27701-ukas-requirements-for-isms-certification-bodies

ISO/IEC 27701:2019 is a privacy extension to the internationally recognised management system standard for information security, ISO/IEC 27001:2013, providing a set of privacy-specific requirements, controls and control objectives.

It specifies the requirements for, and provides guidance on, establishing, implementing, maintaining and continually improving a PIMS (privacy information management system).
ISO 27701 refers to the processing of PII (personally identifiable information), which is similar to “personal data” under the GDPR (General Data Protection Regulation) – information that can be used to identify an individual.
Click to expand...

Why was ISO 27701 developed?
The GDPR and local data protection laws in EU member states and beyond require organisations to take measures to ensure the privacy of any PII they process. However, none of the current laws provide significant guidance on what those measures should look like.

The ISO (International Organization for Standardization) and the IEC (International Electrotechnical Commission) therefore developed a new standard to provide that guidance, and ISO/IEC 27701:2019 was published in August 2019.
Click to expand...

You cannot achieve stand-alone ISO 27701 certification – you must either have ISO 27001 certification already or certify to both standards in tandem.
UKAS has published its national accreditation requirements for ISO 27701 – what is required of accreditation bodies? [...]
Click to expand...

guest · Sep 1, 2020

ISO 27701 Paves the Way for a Strategic Approach to Privacy
September 1, 2020
https://www.darkreading.com/endpoin...-strategic-approach-to-privacy/a/d-id/1338764

Privacy has become a business imperative. May 25, 2020, marked the two-year anniversary of General Data Protection Regulation (GDPR) enforcement, which has already wrought dozens of hefty fines, including €50 million for Google and €99 million for Marriott. Although these fines are less severe than the 4% of annual revenue that GDPR could levy, organizations should still be concerned since dozens of lesser-known companies have also been fined hundreds of thousands of dollars each.

Privacy, like security, has become a critical component for demonstrating trust, both to internal stakeholders and to external customers and partners.
Click to expand...

ISO 27701 offers certification for data controllers (i.e., the data collector) and data processors, or a hybrid of the two.
[...]
Ultimately, the goal of achieving a certifiable international privacy standard with ISO 27701 is to drive new business by demonstrating trust.
Between GDPR and CCPA, we have entered the age of privacy with ISO 27701 emerging as the gold medal for privacy standards.
Click to expand...

Log in or Sign up

ISO 27701 Paves the Way for a Strategic Approach to Privacy

guest Guest

guest Guest

Log in or Sign up

ISO 27701 Paves the Way for a Strategic Approach to Privacy

guest Guest

guest Guest

Useful Searches