ISO/IEC 27701:2019 is an extension to ISO 27001 that establishes requirements for Privacy Information Management Systems (PIMS). It provides a structured approach to privacy management comparable to how ISO 27001 addresses information security.
Organizations certified to ISO 27001 can add ISO 27701 certification to demonstrate comprehensive privacy management. The standard requires organizations to implement privacy-specific controls and policies beyond basic information security measures.