ISO/IEC 27701
Build a certifiable privacy programme with ISO/IEC 27701, mapped to GDPR.
PIMS Gap & Design
Privacy gap analysis and PIMS build
Audit Readiness
Internal audit and mock readiness run
Certification Support
Guided through the 27701 extension audit
PIMS Auditors
Privacy-management specialists
What it is
ISO/IEC 27701 specifies requirements for a Privacy Information Management System, extending ISO/IEC 27001 and 27002 with privacy controls for organisations acting as PII controllers and/or processors. It maps to GDPR and other privacy laws.
Who must comply
Organisations handling significant personal data: SaaS platforms, data processors, adtech, healthcare.
How IntelligenceX helps
Frequently Asked Questions
No. There is no official GDPR certification, but 27701 is the leading certifiable privacy framework and maps directly to GDPR, demonstrating accountability to regulators and customers.
Yes. 27701 is an extension of 27001 and cannot be certified standalone. Many clients pursue both together; we sequence the work to share evidence and audit effort.
Typically three to five months. With a mature ISMS already running, much of the security evidence carries over and we focus on the privacy-specific controller and processor controls, the RoPA and the DPIA process, then certify it as an extension.