Your Personal Data Deserves Protection
Customer information, employee records and other personal data are valuable to your organization and the people behind that data. ISO/IEC 27701 provides a structured approach to managing privacy risks and demonstrating responsible handling of personally identifiable information.

Customer Data

Sensitive Information
Personal Identifiers

Employee Data
What is ISO 27701?
ISO/IEC 27001 is an international standard for establishing, implementing, maintaining and continually improving an Information Security Management System (ISMS). It helps organizations identify information-security risks, determine appropriate controls and build security into their people, processes and technology.

Privacy Starts With Responsible Data Management
Transparency
Know what personal data you process and why.
​
Accountability
Define responsibilities and demonstrate that privacy practices are being managed.
Control
Put appropriate processes and safeguards around personal data.
Why Businesses choose ISO 27701

How can PDCA help
PDCA helps organizations translate ISO/IEC 27701 requirements into practical privacy management processes. Our approach focuses on understanding how personal data is handled, identifying relevant privacy risks and establishing management practices that can work within the organization’s existing operating model.
1
Gap Assessment
Review existing Privacy practices, policies, and controls against requirements.
4
Internal Audit
Evaluate and review the effectiveness of privacy management practices and address identified gaps.
2
Implementation Planning
Define priorities, responsibilities and a practical roadmap for establishing the AIMS.
5
Certification Readiness
Assess the PIMS against applicable requirements and prepare the organization for the certification process.
3
PIMS Implementation
Develop and implement privacy management processes, policies and documentation for the PIMS.
6
Certification Support
Support coordination with the appropriate certification body throughout the certification process.

