Privacy
ISO/IEC 27701:2025 Privacy Information Management System
Manage personal data with a stand-alone, certifiable privacy information management system.
About the standard
The 2025 edition turns privacy information management into its own stand-alone, certifiable management-system standard rather than a bolt-on to ISO/IEC 27001. It sets out requirements and supporting guidance for building and continually improving a Privacy Information Management System covering both organizations that control personal data and those that process it on others' behalf. Because certification no longer requires first holding an ISO/IEC 27001 certificate, the standard broadens its reach while still allowing integration with ISO/IEC 27001 for organizations that want it.
Objectives of the standard
- Define requirements for a stand-alone Privacy Information Management System
- Allow independent PIMS certification without a prerequisite ISMS certificate
- Distinguish obligations for PII controllers versus PII processors
- Enable integration with ISO/IEC 27001 and other management-system standards
- Help organizations evidence compliance with global data-protection laws
Who benefits: Organizations that process personal data as controllers or processors.
Learn more about ISO/IEC 27701:2025 on the ISO website ↗Source: iso.org
Standard overview
A short overview of ISO/IEC 27701:2025 is available on the ISO website, where you can also read the full standard.
Watch overview & read the standard on iso.org ↗Learning paths
Available learning paths
Select the path that matches your role to see the full outline and continue to registration.
Foundation
2 days · 16 hours
Introductory, awareness-level training that explains the purpose, structure, key clauses, terminology, principles and business value of the standard. Suitable for beginners, employees, managers, process owners and anyone who needs a general understanding.
View details →Internal Auditor
3 days · 24 hours
For participants who conduct internal audits within their own organisation or as part of an internal audit team. Covers audit principles, planning, evidence collection, findings, nonconformities, corrective action and reporting, referencing ISO 19011.
View details →Lead Implementer
5 days · 40 hours
For participants who plan, establish, implement, maintain and improve a management system based on the standard. Covers gap analysis, scope, governance, risk-based planning, documentation, controls, performance evaluation, internal audit, management review and continual improvement.
View details →Lead Auditor
5 days · 40 hours
For participants who plan, lead, conduct, report and follow up audits against the standard. Covers audit programme management, planning, team leadership, interview techniques, evidence evaluation, nonconformity grading, reporting and follow-up.
View details →Delivery tracks
Choose how you learn
The delivery track is selected during registration, after you pick a learning path.
Online
Remote live or self-paced learning, depending on the course setup. Flexible access for professionals who prefer to learn from anywhere.
Offline
Classroom, onsite or in-house delivery. Ideal for groups and organisations that need face-to-face interaction and hands-on workshops.
Fast Track
Receive the course materials, study independently and complete the assessment within 14 days. Recommended for experienced professionals.
Certificate & assessment
What you receive
Certificate issued
AXIOS Academy Certificate of Completion
Assessment
Course assessment / exam as defined for the selected level
Verification
Every certificate has a permanent public record on the Academy register
Contribution to the SDGs
Per ISO, ISO/IEC 27701 contributes to the following UN Sustainable Development Goals:
AXIOS Academy provides training and issues its own Certificate of Completion. It operates separately from AXIOS certification: attending a course has no bearing on any certification decision, and ISO itself does not certify organisations or individuals.
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.