Overview
ISO/IEC 27701 is an international standard that specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS). Its purpose is to help organizations manage privacy risks related to the processing of personally identifiable information (PII) and to support compliance with privacy laws and regulations such as the GDPR. The standard is structured as an extension to ISO/IEC 27001 and ISO/IEC 27002, meaning it does not stand alone but enhances an existing or concurrently implemented Information Security Management System with privacy-specific requirements and controls. Its scope applies to organizations of all sizes and sectors that process PII, and it is intended for privacy officers, data protection functions, security teams, auditors and stakeholders accountable for privacy governance. Importantly, it distinguishes the roles of PII controllers and PII processors, providing tailored guidance for each. The standard extends the ISMS requirements to encompass privacy, and it introduces additional privacy-specific control sets that supplement the Annex A controls of ISO/IEC 27001, addressing matters such as consent, purpose limitation, data subject rights, records of processing, privacy by design and by default, and obligations relating to sharing, transfer and disclosure of PII. It maps its controls to widely used privacy frameworks and regulations, easing demonstration of compliance, and complements guidance such as ISO/IEC 29100 and ISO/IEC 27018. Because it inherits the Annex SL structure through ISO/IEC 27001, it integrates readily with other management systems. The main benefits include reduced privacy risk, streamlined regulatory compliance, clearer accountability across controller and processor roles, and enhanced trust among individuals, customers and regulators. Certification is typically achieved as an extension to ISO/IEC 27001 certification, where an accredited body audits the PIMS scope, enabling organizations to demonstrate credible, independently verified privacy management to their stakeholders.
Included: 63 ready-to-use, fully editable documents (manual, procedures, forms, records, checklists, guidance and training material).
License: single-organization license; delivered electronically as a ZIP archive.
From purchase to audit-ready
Buy & download instantly
Pay securely by card. Your ZIP download link appears immediately on the confirmation page and in your email.
Edit & brand as your own
Open the native Word & Excel files, add your logo and details, and adapt everything to your organisation.
Implement & get audit-ready
Roll out the manuals, procedures, forms and checklists to build a working, certification-ready system.
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
Because these are digital products delivered instantly, all sales are final once downloaded. If you have any issue with your files, contact us and we'll make it right. See our Refund Policy for full details.