EVS-EN ISO/IEC 27701:2025

ISO/IEC 27701 specifies requirements for establishing, implementing, maintaining and continually improving a privacy information management system (PIMS). Guidance is also provided to assist in the implementation of the requirements in this document.

Almost every organisation processes personally identifiable information (PII). Further, the quantity and types of PII processed are increasing, as are the number of situations where an organisation needs to cooperate with other organisations regarding the processing of PII. Protection of privacy in the context of the processing of PII is a societal need, as well as the topic of dedicated legal requirements worldwide.

ISO/IEC 27701 is intended for personally identifiable information (PII) controllers and PII processors holding responsibility and accountability for PII processing. It applies to all types and sizes of organisations, including public and private companies, government entities and not-for-profit organisations.

ISO/IEC 27701:2025 text has been approved in Europe as EN ISO/IEC 27701:2025 without any changes.