The international standard for privacy information management systems (PIMS), ISO/IEC 27701, has recently been updated. The revised version, ISO/IEC 27701:2025, contains various substantive changes and additions compared to the previous edition (ISO/IEC 27701:2019). The most significant change is that the standard has been completely rewritten as a standalone management system standard.
Transition period
The exact transition period for the implementation of ISO/IEC 27701:2025 has not yet been determined. This information will be added as soon as it becomes clearer.
What does this mean for organisations?
No immediate action is required at this time.
Once the transition period and the associated requirements are known, an update with a clear step-by-step plan will follow.
If you hold a valid certification, it will remain valid on the basis of ISO/IEC 27701:2019.
Information provision and support
Developments surrounding accreditation and transition are being closely monitored. As soon as more is known about the transition period and the practical consequences for current and new certifications, this will be communicated.
Questions?
Do you have any questions about the transition to ISO/IEC 27701:2025? Please feel free to contact Brand Compliance.