Conditions for collection and processing
ISO/IEC 27701:2025 PIMS Controls
8 articles
- ISO/IEC 27701:2025 A.1.2.2 — Identify and document purpose
- ISO/IEC 27701:2025 A.1.2.3 — Identify lawful basis
- ISO/IEC 27701:2025 A.1.2.4 — Determine when/how consent obtained
- ISO/IEC 27701:2025 A.1.2.5 — Obtain & record consent
- ISO/IEC 27701:2025 A.1.2.6 — Privacy impact assessment
- ISO/IEC 27701:2025 A.1.2.7 — Contracts with PII processors
- ISO/IEC 27701:2025 A.1.2.8 — Joint PII controller
- ISO/IEC 27701:2025 A.1.2.9 — Records related to processing PII