Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 24 SEPTEMBER 2019

ISO/IEC 27701 Released As A New Standard For Privacy Compliance

Foley & Lardner LLP
Explore more from Foley & Lardner LLP

On August 6, 2019, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) released ISO/IEC 27701

United StatesPrivacy
Samuel D. Goldstick
Samuel D. Goldstick
Steven Millendorf
Steven Millendorf
Michael Overly
Michael Overly
Jennifer Rathburn
Jennifer Rathburn
Author LinkedIn connections

ISO/IEC 27701 At-A-Glance

  • ISO/IEC 27701 is a new, privacy-oriented standard that builds upon the well-known ISO/IEC 27001 security standard.
  • Certification to ISO/IEC 27701 (when available) will require certification to ISO/IEC 27001 first.
  • While ISO/IEC 27001 provides controls for general security measures, ISO/IEC 27701 focuses on new requirements and controls, along with implementation guidance, directed specifically at protecting personal information.
  • ISO/IEC 27701 may be used to demonstrate compliance and accountability with various privacy regimes throughout the world, including the GDPR.
  • Businesses may want to include contractual obligations requiring vendors who handle sensitive personal information to comply with or, where appropriate, become certified under ISO/IEC 27701.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Texas Governor Abbott Directs TCEQ To Freeze All Data Center Permits In A Whole-of-Government Action

Governor Greg Abbott has ordered the Texas Commission on Environmental Quality to immediately halt all environmental permits for data center projects, expanding a statewide regulatory freeze that now encompasses power, water, and environmental approvals. This directive establishes strict operational mandates requiring data centers to fully fund infrastructure costs, report all resource consumption...
United StatesEnvironment
Foley & Lardner LLP
Foley & Lardner LLP
Article

California Enacts Seven Data Center Bills, Effective January 1, 2027: New Tariff, Entitlement, And Disclosure Rules For Hyperscalers, Developers, And Power Producers

California Governor Newsom signed seven data center bills into law on September 21, 2026, establishing a comprehensive regulatory framework that takes effect January 1, 2027. These bills create new tariff regimes administered by the California Public Utilities Commission, impose extensive reporting requirements on data center operators, and establish water disclosure mandates and CEQA treatment protocols.
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

More Rigs Than A Year Ago, Higher Costs, And Service Prices That Haven’t Caught Up

Oilfield service firms responding to the Dallas Fed Energy Survey for the third quarter of 2026 reported substantially broader increases in input costs than in the prices they received. The input-cost index was 60.4, compared with a prices-received index of 16.3. Each index represents the percentage of respondents reporting an increase minus the percentage reporting a decrease.
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

September 2026 U.S. Sanctions Roundup: “Operation Economic Outcast” Intensifies Against Iran, Cuba Rules Tighten, And OFAC Overhauls Its Regulations

The U.S. Treasury's Office of Foreign Assets Control (OFAC) intensified its sanctions enforcement in September 2026, with sweeping actions targeting Iran's aviation and financial sectors, new Cuba sanctions regulations, and a comprehensive overhaul of its enforcement architecture. How will these expanded restrictions and the new presumption of denial for Iran-related licenses reshape compliance strategies for multinational companies and financial institutions?
United StatesGovernment, Public Sector
Foley & Lardner LLP
Foley & Lardner LLP
Article

Diesel Stocks Are Expected To Fall Below 100 Million Barrels. Check Your Fuel Clauses.

Diesel prices have shattered records, hitting $6.529 per gallon nationally while distillate inventories plunge below five-year lows and are expected to remain there through most of 2027. With crack spreads exceeding $106 per barrel and global supply disruptions intensifying, fleet operators and oilfield services companies face mounting fuel costs that many existing contracts weren't designed to handle.
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

Texas Escalates Data Center Oversight With Attorney General Water-Use Investigation

Texas has launched a sweeping investigation into hundreds of data center developments that failed to comply with mandatory water use surveys, marking the latest escalation in a seven-week regulatory crackdown. The state's actions have frozen permits, paused interconnection studies, and exposed projects to criminal and civil enforcement, all while the industry faces mounting scrutiny over its rapidly growing demands on electricity and water infrastructure. With multiple state agencies now coordinating enforc
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

No More Counting Zeros: IRS Proposed Rules Make Dependent Care FSA Testing Easier And May Open The Door To The $7,500 Limit

Proposed IRS regulations would significantly simplify dependent care assistance program (DCAP) nondiscrimination testing by excluding employees who receive no benefits from the 55% average benefits test. This participant-only approach should reduce testing failures and the need for employers to cap highly compensated employees’ elections.
United StatesEmployment and HR
Foley & Lardner LLP
Foley & Lardner LLP