Topics: Privacy and Data Protection Organization: ISO, IEC Description: Specifies the requirements for a privacy information management system based on the requirements of ISO 27001 with an extension of privacy-specific requirements, control objectives, and controls.