A new standard has been published to support the privacy information management
Not surprisingly, laws and regulations are rarely enforced to reduce cyber risks and ensure the confidentiality of information in the digital environment.
How can organizations meet these requirements and at the same time protect themselves? To this end, the first international standard has been published to help organizations manage the privacy of personal information and meet legal requirements in this area.
Protecting the privacy of our data in the digital space is of paramount importance to business.
The loss of data leaks averaged $ 3,6 million, and legal requirements are extremely stringent. The more connected the digital space becomes, the more confidentiality regulations the public authorities impose: for example, the European GDPR (General Data Protection Regulation), which organizations must comply with. The new standard will help businesses meet these requirements, regardless of their jurisdiction.
ISO/IEC 27701 Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirements and guidelines sets out the requirements for the implementation, maintenance and continuous improvement of a system for the management of specific private information or Privacy Information Management System (PIMS).
The standard is based on ISO/IEC 27001 Information technology — Security techniques — Information security management systems — Requirements with additional requirements related to the privacy of information.
ISO/IEC 27701 defines processes and provides guidelines for the protection of personal data information. In the scope of a management system, the standard defines processes for continuous improvement of data protection, which is extremely important in a world where technologies are changing.
The standard has the same clauses of ISO/IEC 27001 and ISO/IEC 27002. Additional requirements for personal data processors and controller have been added in Chapters 7 and 8.
Microsoft is an active member of the standard-setting committee.
The standard is applicable to all types and sizes of organizations, including public and private companies. The document also defines the requirements related to the confidentiality of information and provides instructions for processors of personal data and control authorities.
www.iso.org
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
