Data Protection

Specifies the requirements for a privacy information management system based on the requirements of ISO 27001 with an extension of privacy-specific requirements, control
objectives, and controls.