#59 What is ISO 27701?

Steve Mason is a Senior Consultant at Blackmores (UK) Ltd, and has a 100% success rate of supporting clients in achieving their ISO9001 & ISO27001 certifications on their first time. With over 38 years of experience working with standards, Steve is incredibly knowledgeable about how to ensure companies get the best benefits when implementing new standards. Steve has never stopped advancing himself and continues to broaden his knowledge of new standards as they come into existence. Today, Steve is here to discuss ISO 27701 (Data Privacy), and why it’s so important to have so that you can prove you are GDPR compliant. Since the new European Data Privacy Laws were introduced in May 2018 there have been over 150,000 personal data breaches within Europe, and the estimated total of GDPR fines total a little over 220 million euros. Steve explains why GDPR is so important, how companies can avoid having data breaches, and what makes ISO 27701 different from previous standards. You’ll learn How ISO 27701 can help companies demonstrate compliance with the requirements of GDPR. The ways ISO 27701 is different from ISO 27001 and why you need both standards. Who you can share PII with while still maintaining GDPR compliance. The correlations ISO 27701 has with ISO 27002. The potential impact implementing ISO 27702 can have. Resources Blackmores In this episode, we talk about: [00:29] The big personal data breaches that have happened in the last 2 years, and the fines the companies received for not being compliant with the data protection laws. [04:11] Why we have General Data Protection Regulations and what they are there to protect. [06:36] What ISO 27701 is and how it helps companies be GDPR compliant. [09:26] What PII (Personally Identifiable Information) is. [11:41] An overview of ISO 27701 and what its main clauses are. [14:04] What the two control sets of the standard are and what the difference between a data controller and a data processor is. [17:20] How this standard helps companies know what needs to be put in place to be GDPR compliant. [18:51] What makes ISO 27701 better than BS 10012 and why it will eventually completely replace it. [22:14] What you already need in place to get ISO 27701 certified. [24:10] The main benefits for companies implementing this standard has. If you need assistance with implementing ISO 27701 – Contact us! We’d love to hear your views and comments about the ISO Show, here’s how: Share the ISO Show on Twitter or Linkedin Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one. Subscribe to keep up-to-date with our latest episodes: Stitcher | Spotify | YouTube |iTunes | Soundcloud