ISO/IEC 27701:2019: An introduction to privacy information management

CHAPTER 2: WHAT NEEDS TO BE CONSIDERED?

So, how can an effective privacy information management system (PIMS) address the needs of an organisation? What needs to be addressed? Does this include issues relating to clients and customers, staff at all levels, suppliers and cultural issues? What must also be considered is that privacy information management is a topic that goes well beyond the remit of information technology, as personal information contained in any medium (such as paper) needs to be included in the organisation’s PIMS. The organisation would also benefit if the PIMS covers the whole of the organisation and its sub-contractors.

Having identified what privacy information management is, and recognising it as something that organisations ...