When you submit an enquiry via our website, we use the personal data you supply to respond to your query, including providing you with any requested information about our products and services. We may also email you several times after your enquiry in order to follow up on your interest and ensure that we have answered your it to your satisfaction. We will do this based on our legitimate interest in providing accurate information prior to a sale. Your enquiry is stored and processed as an email which is hosted by Microsoft within the European Economic Area (EEA). We keep enquiry emails for two years, after which they are securely archived and kept for seven years, when we delete them.
CertiKit is proud to announce the launch of a brand-new toolkit: ISO27701 Privacy Information.
The most popular toolkit in our stable for the past decade has been the one covering ISO27001: Information Security.
In recent months, we noticed a rise in comments from customers concerned about Privacy Information – and requesting a new toolkit for the bolt-on Standard of ISO27701.
This outlines a framework for Personally Identifiable Information (PII) controllers and processors to manage privacy controls to reduce the risk to people’s privacy rights.
We listened – and we got to work. Now we are pleased to unveil our 13th toolkit.
CertiKit managing director Ken Holmes explained that privacy continued to be a hot topic worldwide.
He added: “We are delighted to be able to help organizations comply with the ISO27701 privacy standard, which defines an effective framework for compliance.
“All our knowledge and experience of ISO standards and the GDPR have gone into making this toolkit an accurate and useful addition to our toolkit product range.
“As an add-on to the ISO27001 standard, many of our customers have been keenly awaiting our toolkit, so we’re pleased to be able to deliver.”
ISO27701 is one of many standards in the ISO27000 family. Others cover areas such as cloud services, risk management and network security.
Privacy information management systems are covered by ISO27701, which was published in August 2019.
Certification to ISO27701 is not an option on its own – ISO27001 is a necessary prerequisite to it.
Also, there is no obligation to become certified to ISO27701. Many organizations choose to simply use it as a set of good-practice principles.
These will guide them along the way to managing their information privacy risks and achieving compliance with privacy legislation, such as the European Union’s GDPR (General Data Protection Regulation).
CertiKit is a provider of ISO toolkits, consultancy and internal auditing services, and have helped more than 4000 organizations worldwide with their compliance.
For more guidance on implementing the ISO27701:2019 standard, we’ve put together a list of our best free resources including sample documents, blogs and downloadable documents.