ISO 27701

ISO 27701:2019 is the latest edition of the international standard. We assess and audit organisations in line with the most up-to-date ISO certification requirements.

ISO 27701 certification is suitable for any organisation, large or small, in any sector. The standard is especially relevant where the protection of personal information is critical, such as in the financial, health, public and IT sectors. The standard is also applicable to organisations that manage high volumes of data or information on behalf of other organisations, such as data centres and IT outsourcing companies.

Companies must be certified to ISO 27001 Information Security Management System first before adding the ISO 27701 Privacy Information Management standard. The information security management standard is valid for three years and is subject to mandatory audits to ensure compliance.

When you become certified in ISO 27701, you don’t receive a physical certificate – your ISO 27001 certificate is updated to reflect this.

ISO 27001 is the international standard used by organisations worldwide to manage information security. It was first created by the International Organization for Standardization.

ISO 27701 is valid for three years and is subject to mandatory audits to ensure compliance.

At the end of the three years, an organisation will be required to complete a reassessment audit to receive the standard for an additional three years.

Amtivo is now accredited through UKAS for ISO 27701.