Updates to the International Organization for Standardization’s privacy compliance management standard, ISO 27701, represent several significant changes, such as eliminating the requirement for organizations to employ an ISO 27001 certified Privacy Information Security Management System, Birdie Data Protection Officer Henry Davies, AIGP, CIPP/E, CIPM, FIP, writes. Davies outlines the key revisions to the ISO 27701’s PIMS clauses and more. Overall, he said the updated standard is “intentionally jurisdiction neutral, meaning it might be a good fit for multinational organizations looking to create a unified privacy management framework.”
Full story