OPENING

For six years, ISO 27701 existed as an extension of ISO 27001. If you wanted a privacy certification, you needed an information security management system first. That changed in October 2025 when ISO/IEC 27701:2025 was released as a fully independent, standalone standard.

This is not a minor update. It is a fundamental shift in how privacy governance can be demonstrated, audited, and maintained.