Information Security
ISO/IEC 27701 — Privacy Information Management
Show customers their personal data is truly protected.
Request Certification
About this standard
ISO/IEC 27701 extends your information security management system to cover privacy, demonstrating compliant handling of personal data as a controller or processor.
Benefits of certification
- Demonstrated compliance with privacy regulations
- Increased trust from customers and partners
- Clear accountability for personal data handling
- Competitive advantage in data-sensitive industries
Key requirements
- Privacy risk assessment and data mapping
- Roles and responsibilities for data controllers/processors
- Data subject rights handling procedures
- Privacy incident management and breach notification
Audit flow you'll go through
Every step is planned, executed, technically reviewed, and decided independently, in line with ISO/IEC 17021-1:2015.
- 1
Application & Quotation
Submit your application and scope; we review it and issue a certification quotation.
- 2
Stage 1 Audit
Document review and readiness assessment to confirm your management system is ready for Stage 2.
- 3
Stage 2 Audit
On-site audit evaluating implementation and effectiveness of your management system against the standard.
- 4
Technical Review & Decision
Findings are independently reviewed and a certification decision is made by a qualified committee.
- 5
Certificate Issued
Your certificate is issued and registered, valid for a 3-year cycle.
- 6
Surveillance Audit 1 & 2
Annual surveillance audits confirm continued conformity and improvement.
- 7
Recertification
A full audit before expiry renews your certificate for another 3-year cycle.
Ready to start your certification journey?
Apply online and our team will guide you through every step — from quotation to certificate issuance, fully aligned with ISO/IEC 17021-1.
Request ISO/IEC 27701 certification
Submit your details and our team will start your application per ISO/IEC 17021-1.