ISO/IEC 27701:2025 PIMS Controls

The Privacy Information Management System extension to ISO/IEC 27001 — controls for PII controllers and processors that evidence GDPR-style accountability and form the most-recognised international way to demonstrate alignment with major privacy regulations.

ISO/IEC 27701:2025 PIMS Controls — control library

78 controls · 10 sections

Conditions for collection and processing8

ISO/IEC 27701:2025 PIMS Controls

+ 3 more in this section

Obligations to PII principals10

ISO/IEC 27701:2025 PIMS Controls

+ 5 more in this section

Privacy by design / default9

ISO/IEC 27701:2025 PIMS Controls

+ 4 more in this section

PII sharing, transfer & disclosure4

ISO/IEC 27701:2025 PIMS Controls

Conditions for collection and processing (processors)6

ISO/IEC 27701:2025 PIMS Controls

+ 1 more in this section

Obligations to PII principals (processors)1

ISO/IEC 27701:2025 PIMS Controls

ISO/IEC 27701:2025 A.2.3.2 — Comply with obligations

Privacy by design / default (processors)3

ISO/IEC 27701:2025 PIMS Controls

PII sharing, transfer & disclosure (processors)8

ISO/IEC 27701:2025 PIMS Controls

+ 3 more in this section

Security considerations (controllers/processors)1

ISO/IEC 27701:2025 PIMS Controls

ISO/IEC 27701:2025 A.3.3 — Information security policies

Security considerations28

ISO/IEC 27701:2025 PIMS Controls

+ 23 more in this section