什麼是 ISO/IEC 27701:2025 新版本？
ISO/IEC 27701:2025, the updated Privacy Information Management System (PIMS) standard, has been officially released. Building upon the 2019 edition, this revision introduces significant enhancements that improve adaptability and ensure closer alignment with contemporary ISO frameworks.
The new revision of ISO/IEC 27701—the international benchmark for Privacy Information Management Systems (PIMS)—was officially released on 14 October 2025 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).
A key advancement in the 2025 edition is its transformation into a standalone standard. Organizations can now establish and certify their PIMS independently, without the prerequisite of an existing Information Security Management System (ISMS). This shift enhances accessibility and enables a wider array of organizations to implement robust privacy practices.
Although the updated standard retains core principles from ISO/IEC 27701:2019, ISO/IEC 27001:2022, and ISO/IEC 27002:2022, it has been restructured to align more effectively with other management frameworks, including ISO 9001 (Quality Management), ISO/IEC 27001 (Information Security), and ISO/IEC 42001 (Artificial Intelligence). This interoperability ensures greater adaptability for organizations of all sizes and operational complexities.
新版本有哪些變化？
- ISO/IEC 27701:2019 > Extension of ISO/IEC 27001, limited to organizations with ISMS.
- ISO/IEC 27701:2025 > Stand‑alone, globally aligned, modernized for AI/digital contexts, with stronger governance and accessibility.
Benefit of ISO/IEC 27701:2025
> Transitioned to a standalone Privacy Information Management System (PIMS), eliminating its reliance on ISO/IEC 27001.
> Enhanced to offer comprehensive direction for data controllers as well as processors.
> Enhanced clarity regarding the appropriate handling of personal data within AI-driven and digital environments.
> Enable organizations to strengthen information security and minimize the risk of fraud, data loss, and leaks.
> Enhanced with international privacy best practices.
Exquisite Certification And Audit Limited (ECA)
Tel : 852 2180-6199
Fax: 852 3893-0878
Email : info@exquisite-service.com
