ALPHASEC / EXPLORE
Understanding ISO/IEC 27701:2025
Privacy information management for controllers and processors.
Current edition
ISO published ISO/IEC 27701:2025 in October 2025. It is an independent privacy information management system standard that can also be aligned with ISO/IEC 27001.
Putting it into practice
Begin with context and processing scope, assign responsibilities, assess privacy risks, establish controls and evidence, and monitor and improve the system.
Organisations using the 2019 edition
The original page referred to the 2019 edition. Organisations should review the 2025 requirements and discuss an appropriate transition plan with their certification body.
Reference: ISO official standard information