• News & Updates
  • About the Transition to ISO/IEC 27701:2025 Standard

About the Transition to ISO/IEC 27701:2025 Standard

ISO/IEC 27701:2019, which specifies requirements for Privacy Information Management Systems (PIMS), has been revised and published as ISO/IEC 27701:2025. The revised standard introduces significant changes, including its transition to a standalone management system standard, updated privacy risk management requirements, and restructured privacy controls. In accordance with the transition arrangements established by the International Accreditation Service (IAS), all organisations currently certified to ISO/IEC 27701:2019 must complete their transition to ISO/IEC 27701:2025 by 31 October 2027. Following approval of KingCert's accreditation transition by IAS, the date from which new applications for ISO/IEC 27701:2025 certification will be accepted will be announced separately. Initial certification and recertification audits will be conducted against the revised standard following accreditation transition approval. To allow sufficient time for transition audits, evaluation of any nonconformities and completion of certification decisions, existing certified organisations are requested to complete the necessary updates to their Privacy Information Management Systems and confirm their readiness for transition assessment to KingCert by 31 July 2027. Transition assessments will be planned in conjunction with scheduled surveillance or recertification audits, or separately where necessary. The applicable audit arrangements and duration will be communicated to each organisation individually. Organisations that do not complete their transition by 31 October 2027 may be subject to certification actions in accordance with the applicable certification procedures. For further information or assistance with transition planning, please contact our team.