ISO/IEC 27701

ISO/IEC 27701 is an international standard for privacy management and is an extension of ISO/IEC 27001. Whereas ISO/IEC 27001 focuses on information security in general, ISO/IEC 27701 focuses specifically on the protection of personal data. The standard describes how organizations systematically manage privacy risks and how they process personal data in a transparent and responsible manner. Organizations that work according to ISO/IEC 27701 implement a privacy management system that helps to structurally organize privacy policies, responsibilities, and processes.

For Fellow Digitals, ISO/IEC 27701 means that privacy protection is an integral part of our governance, processes, and product development. We have clear procedures for processing personal data, defining roles and responsibilities (such as controller and processor), and managing privacy risks. We also ensure that principles such as data minimization, purpose limitation, and transparency are applied in our systems and services.

The standard also helps us to comply with international privacy legislation, such as the European GDPR and the Singaporean PDPA. Within our organization, privacy measures are regularly evaluated and improved where necessary. Employees are made aware of privacy obligations and we support our customers in complying with their own privacy obligations when they use our platforms.

By working in accordance with ISO/IEC 27701, we demonstrate that we handle personal data carefully and responsibly. It provides a structured approach to ensuring privacy, managing risks, and building trust among customers, partners, and users.