Question 1 of 10 · Fundamental principles and concepts of a privacy information management system
What happens to organizations certified to ISO/IEC 27701:2019?
Existing certificates transition within a period set by accreditation rules. Certificates were not cancelled on publication, and 27001 certificates are unaffected.
Question 2 of 10 · Initiation of the PIMS implementation
What should initiation decide about external help?
Consultants can help, but certification bodies cannot implement what they certify.
Question 3 of 10 · Planning a PIMS implementation based on ISO/IEC 27701
Why involve legal and privacy roles in PIMS planning?
Legal and privacy roles interpret obligations and role.
Question 4 of 10 · Implementation of a PIMS based on ISO/IEC 27701
What control addresses PII retention?
Retention controls keep PII only as long as needed.
Question 5 of 10 · Monitoring and measurement of a PIMS based on ISO/IEC 27701
How often should PIMS management reviews occur?
Planned intervals are required.
Question 6 of 10 · Continual improvement of a PIMS based on ISO/IEC 27701
How is the effectiveness of corrective action verified?
Effectiveness is verified by confirming no recurrence.
Question 7 of 10 · Preparing for a PIMS certification audit
What usually happens if a major nonconformity is found at stage 2?
Majors must be resolved before certification.
Question 8 of 10 · Fundamental principles and concepts of a privacy information management system
How does ISO/IEC 27701:2025 relate to ISO/IEC 27001?
Since 2025, 27701 stands alone with its own clauses 4 to 10 and controls, and shares the harmonized structure so it can be integrated with an ISMS. It does not replace 27001, and 27001 does not extend it.
Question 9 of 10 · Initiation of the PIMS implementation
Why review contracts at initiation?
Data processing agreements and client terms add obligations the PIMS must meet.
Question 10 of 10 · Planning a PIMS implementation based on ISO/IEC 27701
What must the PIMS scope make clear?
Scope defines which processing, which roles (controller, processor or both) and which parts of the organization the PIMS covers. Products, budgets and auditors are not scope.
0 of 10
Fundamental principles and concepts of a privacy information management system
Initiation of the PIMS implementation
Planning a PIMS implementation based on ISO/IEC 27701
Implementation of a PIMS based on ISO/IEC 27701
Monitoring and measurement of a PIMS based on ISO/IEC 27701
Continual improvement of a PIMS based on ISO/IEC 27701
Preparing for a PIMS certification audit
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.