ISO/IEC 27701 specifies requirements for establishing, implementing, maintaining, and continually improving a Privacy Information Management System (PIMS) as an extension to ISO/IEC 27001 and ISO/IEC 27002. It provides guidance for managing privacy risks related to personally identifiable information (PII) within an organization.

This standard can also be used to assess an organization’s ability to meet privacy and regulatory requirements, as well as contractual obligations relating to the protection of PII.