Standalone PIMS
Organizations can establish privacy governance without making an ISO 27001 ISMS the structural prerequisite.
Privacy management
ISO/IEC 27701:2025 PIMS Guidance
Build privacy governance that connects processing roles and risks to accountable controls, operating evidence and improvement.
Current edition
ISO/IEC 27701:2025
The second edition was published in October 2025. It is an independent management system standard for privacy information management and can also integrate with ISO/IEC 27001.
Processing roles
Scope and controls should reflect the organization's responsibilities as a PII controller, processor or both.
Evidence-led assurance
Privacy risks, controls, performance, internal audit and management decisions need traceable operating evidence.
Use the official ISO overview to confirm the edition and obtain the standard through an authorized source for exact requirements.
Practical resources
ISO/IEC 27701 guidance
Original guidance for edition transition, standalone PIMS implementation and evidence-based privacy governance.
Guide
How to Implement ISO/IEC 27701:2025 as a Standalone PIMS
Implement ISO/IEC 27701:2025 as a standalone PIMS with defined scope, privacy-risk decisions, accountable controls and credible operating evidence.
Comparison
ISO/IEC 27701:2025 vs 2019: What Changed for PIMS Evidence
Compare ISO/IEC 27701:2025 with the withdrawn 2019 edition, including standalone PIMS governance, privacy risks, controls and audit evidence.
Comparison
ISO 27001, ISO 27002 and ISO 27701: How the Standards Fit Together
Compare ISO 27001 requirements, ISO 27002 control guidance and the standalone ISO 27701:2025 privacy management system, including audit evidence.
Build a PIMS that operates
- Define scope, processing activities and controller or processor roles.
- Identify applicable obligations and privacy risks.
- Select controls and assign accountable owners.
- Collect implementation and operating evidence.
- Evaluate performance through audit, review and corrective action.