European Union: Adopted CEN-CENELEC standard EN 17926 Privacy management system in accordance with EN ISO/IEC 27701

On 29 November 2023, the European Committee for Standardization in Electronics and Electrotechnics (CEN-CENELEC) adopted the standard EN 17926 Privacy management system in accordance with EN ISO/IEC 27701 – refinements relating to the European context. It serves as a guide for organisations to implement the general requirements and controls of ISO/IEC 27701 in accordance with their specific circumstances and legal obligations. Certification bodies can utilise the specifications in this document as a foundation for establishing certification criteria to verify compliance with ISO/IEC 27701. These criteria, based on the document's specifications, can form a certification model under ISO/IEC 17065 for processing operations covered by a Privacy Information Management System in line with ISO/IEC 27701. Furthermore, these criteria can be integrated with certification requirements for ISO/IEC 27701 under ISO/IEC 17021. Accreditation bodies and regulatory authorities can leverage the provisions in this document as standards to develop certification mechanisms.