ISO/IEC 27701:2025
An introduction to privacy information management systems
Published on 20. November 2025
Book
Paperback/Softback
74 pages
978-1-78778-608-0 (ISBN)
Description
Take the complexity out of privacy management with this guide to ISO 27701:2025 - the go-to resource for anyone who needs a fast, reliable understanding of privacy information management.
The book explains how the 2025 revision separates ISO/IEC 27701 from ISO/IEC 27001, giving privacy professionals a dedicated framework to manage personal data effectively and prove compliance.
Written in a clear, no-nonsense style, it helps you:
Understand what privacy information management really means.
Build or enhance a PIMS aligned with ISO/IEC 27701:2025.
Identify the key investment areas for a business-focused approach.
Show customers, partners and regulators your commitment to privacy and trust.
Whether you're new to privacy management or preparing your organisation for certification, this compact guide provides the clarity and confidence you need. It's ideal at every stage of your journey - from making the business case and launching a project to raising awareness and training your teams.
Practical, authoritative and accessible.
This ISO/IEC 27701:2025 book turns a complex standard into a clear roadmap for improving privacy information management. Perfect for:
Privacy and compliance professionals
Project managers and information security teams
Organisations preparing for or maintaining ISO/IEC 27701 certification
Your essential companion to implementing and improving a PIMS - buy today!
The book explains how the 2025 revision separates ISO/IEC 27701 from ISO/IEC 27001, giving privacy professionals a dedicated framework to manage personal data effectively and prove compliance.
Written in a clear, no-nonsense style, it helps you:
Understand what privacy information management really means.
Build or enhance a PIMS aligned with ISO/IEC 27701:2025.
Identify the key investment areas for a business-focused approach.
Show customers, partners and regulators your commitment to privacy and trust.
Whether you're new to privacy management or preparing your organisation for certification, this compact guide provides the clarity and confidence you need. It's ideal at every stage of your journey - from making the business case and launching a project to raising awareness and training your teams.
Practical, authoritative and accessible.
This ISO/IEC 27701:2025 book turns a complex standard into a clear roadmap for improving privacy information management. Perfect for:
Privacy and compliance professionals
Project managers and information security teams
Organisations preparing for or maintaining ISO/IEC 27701 certification
Your essential companion to implementing and improving a PIMS - buy today!
More details
Language
English
Place of publication
Ely
United Kingdom
Target group
Professional and scholarly
US School Grade: College Graduate Student
Dimensions
Height: 178 mm
Width: 111 mm
Thickness: 6 mm
Weight
101 gr
ISBN-13
978-1-78778-608-0 (9781787786080)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Persons
Alan Shipman is managing director at Group 5 Training Limited.
Alan acted as project editor for the world's first privacy information management international standard (ISO/IEC 27701:2019).
He is Chair of IST/33/5, which is responsible for the UK's contributions to the work of ISO/IEC JTC1/SC27/WG5, which deals with identity management and privacy technologies.
Alan has more than 30 years' experience managing personal information, both as a data processor for a service organisation and as a data controller. He is a regular speaker at conferences, covering all aspects of information management. Alan has been involved in the development of BS 10008 throughout its life (first published as guidance in 1996). This deals with the management of electronic information of all types, including the conversion of paper-based information to electronic forms. His experience includes advising organisations in both the public and private sector on the implementation of BS 10008.
Alan can be contacted at a.shipman@group5.co.uk.
Steve Watkins is a director at Kinsnall Consulting Ltd. He is a contracted technical assessor for UKAS - advising on its assessments of certification bodies offering ISO/IEC 27701/PIMS, ISO/IEC 27001/ISMS and ISO/IEC 20000-1/ITSMS accredited certification, and undertakes information security assessments of forensic science laboratories seeking accreditation to the Forensic Science Regulator's codes of practice and conduct.
Steve is a member of ISO/IEC JTC 1/SC 27, the international technical committee responsible for information security, cyber security and privacy standards, and from 2018 to 2025 chaired the UK National Standards Body's technical committee IST/33 (information security, cyber security and privacy protection) that mirrors it. He is the ISO representative on the EU/ENISA Stakeholder Cybersecurity Certification Group (SCCG).
Steve can be contacted at SteveGWatkins@Kinsnall.com.
Alan acted as project editor for the world's first privacy information management international standard (ISO/IEC 27701:2019).
He is Chair of IST/33/5, which is responsible for the UK's contributions to the work of ISO/IEC JTC1/SC27/WG5, which deals with identity management and privacy technologies.
Alan has more than 30 years' experience managing personal information, both as a data processor for a service organisation and as a data controller. He is a regular speaker at conferences, covering all aspects of information management. Alan has been involved in the development of BS 10008 throughout its life (first published as guidance in 1996). This deals with the management of electronic information of all types, including the conversion of paper-based information to electronic forms. His experience includes advising organisations in both the public and private sector on the implementation of BS 10008.
Alan can be contacted at a.shipman@group5.co.uk.
Steve Watkins is a director at Kinsnall Consulting Ltd. He is a contracted technical assessor for UKAS - advising on its assessments of certification bodies offering ISO/IEC 27701/PIMS, ISO/IEC 27001/ISMS and ISO/IEC 20000-1/ITSMS accredited certification, and undertakes information security assessments of forensic science laboratories seeking accreditation to the Forensic Science Regulator's codes of practice and conduct.
Steve is a member of ISO/IEC JTC 1/SC 27, the international technical committee responsible for information security, cyber security and privacy standards, and from 2018 to 2025 chaired the UK National Standards Body's technical committee IST/33 (information security, cyber security and privacy protection) that mirrors it. He is the ISO representative on the EU/ENISA Stakeholder Cybersecurity Certification Group (SCCG).
Steve can be contacted at SteveGWatkins@Kinsnall.com.
Content
Contents:
Chapter 1: What is privacy information management?
Chapter 2: What needs to be considered?
Chapter 3: ISO/IEC 27701 and the privacy information management system requirements
Chapter 4: Legal, Regulatory and Contractual Requirements and Business Risk
Chapter 5: Privacy information management controls
Chapter 6: Certification
Chapter 7: Terms and definitions
Further reading
Chapter 1: What is privacy information management?
Chapter 2: What needs to be considered?
Chapter 3: ISO/IEC 27701 and the privacy information management system requirements
Chapter 4: Legal, Regulatory and Contractual Requirements and Business Risk
Chapter 5: Privacy information management controls
Chapter 6: Certification
Chapter 7: Terms and definitions
Further reading