News in ISO 16 May 2025

ISO/IEC 27701:2025 Is Coming - Final Voting on the Standard Has Begun

The approval process for ISO/IEC 27701:2025 is underway. Learn what’s changing in this privacy extension to ISO 27001, when the new version will be published, and how to prepare for certification. Stay updated with Certiget.

On May 8, 2025, the final approval process for the updated version of ISO/IEC 27701 officially began. This privacy extension to ISO/IEC 27001 – known as the Privacy Information Management System (PIMS) – has reached Stage 50.20, where ISO member countries vote on the Final Draft International Standard (FDIS).

What Does Stage 50.20 Mean?

Stage 50.20 indicates that the final draft of the standard has been submitted for an 8-week ballot. This is one of the last steps before official publication. If the vote passes, the new standard will be published as ISO/IEC 27701:2025.

https://www.iso.org/standard/85819.html 

 

Why the Update?

The revision of ISO/IEC 27701 aims to address:

  • Alignment with ISO/IEC 27001:2022 (recently revised),
  • Increasing global focus on data privacy and compliance,
  • The evolution of legal frameworks such as GDPR and CCPA,
  • Better guidance for organizations managing personal information in a digital world.

When Will ISO/IEC 27701:2025 Be Published?

If the final vote is successful, the publication is expected in the second half of 2025. Based on standard ISO timelines, this means the updated version could be available as early as Q3 2025.

What Should Organizations Do Now?

Organizations already certified to ISO/IEC 27701:2019 should monitor the revision process and prepare for transition planning.

Stay connected with certiget.eu or certiget.pl to find and compare certification bodies offering updated audits and transition services.

What Is ISO/IEC 27701?

ISO/IEC 27701 is an international standard developed as an extension of ISO/IEC 27001 and ISO/IEC 27002, providing specific requirements and guidance for managing personal data. It helps organizations demonstrate compliance with data protection regulations, such as the General Data Protection Regulation (GDPR) in Europe.

Stay Informed

 Certiget will continue to monitor the status of ISO/IEC 27701:2025 and share updates with our community.
Follow us on LinkedIn or subscribe to our newsletter to stay ahead of changes in the certification landscape.

Article author


Aleksandra Gorna

Administrative Assistant

Certiget.

Aleksandra is an experienced administrative specialist at Certiget. With a passion for organization and attention to detail, she supports the company’s daily operations and ensures smooth document flow. Her experience in administration, knowledge of ISO standards, empathy, and interest in psychology help build a positive work environment and effective communication with clients and the team.


Share this article

Recommended from this category