Assessing and improving organizational privacy capability using the maturity model approach 1. Understanding the Privacy Capability Maturity Model ISO/IEC 29102 provides a capability maturity model specifically designed for assessing and improving an organization’s privacy management capabilities. The model defines five…

Framework for implementing privacy by design throughout the system lifecycle with privacy-enhancing technologies and engineering processes 1. ISO/IEC 27706:2022 — Privacy by Design Framework ISO/IEC 27706:2022 provides requirements and guidelines for implementing privacy by design (PbD) throughout the lifecycle of…

Standardized test methods for measuring volatile organic compound and particulate emissions from office electronic devices ISO/IEC 28360-1 establishes standardized methodologies for determining chemical emission rates from electronic office equipment, including printers, copiers, computers, and displays. As modern office environments become…

Specialized emission testing protocols for printers, copiers, and multifunction printing devices ISO/IEC 28360-2 specifically addresses chemical emission measurement for printing and imaging equipment, building upon the general framework established in Part 1. Printers present unique emission challenges due to their…

Sector-specific privacy guidelines for financial technology services and platforms 1. Introduction to ISO/IEC 27562 ISO/IEC 27562 provides specialized privacy guidelines tailored to the financial technology (fintech) sector, addressing the unique privacy challenges that arise from the convergence of financial services…

Comprehensive guidelines for protecting PII throughout the AI system lifecycle 1. Introduction to ISO/IEC 27565 ISO/IEC 27565 provides comprehensive guidelines for protecting personally identifiable information (PII) throughout the lifecycle of artificial intelligence (AI) systems, from data collection and model training…

A comprehensive framework for age assurance systems balancing privacy and regulatory compliance 1. Introduction to ISO/IEC 27566-1 ISO/IEC 27566-1 establishes a comprehensive framework for age assurance systems — technical solutions that estimate or verify an individual’s age for the purpose…

Extension to ISO/IEC 27001 for privacy information management with PII controller and processor requirements 1. ISO/IEC 27701:2019 — Privacy Extension to ISO/IEC 27001 ISO/IEC 27701:2019 extends the ISO/IEC 27001 information security management system (ISMS) framework to address privacy information management…

A comprehensive framework for organizational privacy risk assessment and treatment 1. Introduction to ISO/IEC 27557 ISO/IEC 27557 provides a comprehensive framework for organizations to identify, assess, treat, and monitor privacy risks within their operations. Published as part of the ISO/IEC…

A systematic methodology for de-identification of personally identifiable information 1. Introduction to ISO/IEC 27559 ISO/IEC 27559 establishes a structured framework for de-identification of personally identifiable information (PII), providing organizations with a systematic methodology to reduce privacy risks while maintaining the…

Translating privacy principles into actionable engineering and organisational practices 1. Introduction to ISO/IEC 27561 ISO/IEC 27561 provides a structured framework for operationalising privacy principles within organizations, translating high-level privacy requirements into actionable engineering processes and organisational practices. It bridges the…

Concrete mechanisms and implementation guidance for privacy-preserving authentication 1. Overview of ISO/IEC 27553-2 Mechanisms ISO/IEC 27553-2:2022 builds upon the framework established in Part 1 by providing detailed technical specifications for privacy-preserving authentication mechanisms. While Part 1 defines the principles and…

End-to-end framework for data de-identification and re-identification risk management 1. Understanding ISO/IEC 27554:2022 ISO/IEC 27554:2022 establishes a comprehensive framework for de-identification of personally identifiable information (PII). In an era of big data analytics, artificial intelligence, and open data sharing, organizations…

Comprehensive guidelines for selecting and deploying Privacy Enhancing Technologies 1. Introduction to ISO/IEC 27555:2022 ISO/IEC 27555:2022 provides comprehensive guidelines for Privacy Enhancing Technologies (PETs) — a diverse set of tools, techniques, and systems designed to protect personal information while enabling…

Structured multi-criteria decision framework for selecting Privacy Enhancing Technologies 1. The Need for a PET Selection Framework ISO/IEC 27556:2022 addresses a fundamental challenge faced by privacy engineers and decision-makers: how to systematically select the most appropriate Privacy Enhancing Technology (PET)…

Smart home security and privacy guidelines addressing multi-vendor interoperability, voice assistant security, and residential IoT protection 1. Introduction to ISO/IEC 27403:2023 ISO/IEC 27403:2023 provides IoT security and privacy guidelines specifically tailored for domotics (smart home) environments. Published as part of…

Standardised cybersecurity labelling framework for IoT products with 1-5 star ratings, conformity assessment, and market implications 1. Purpose of ISO/IEC 27404:2024 ISO/IEC 27404:2024 defines a cybersecurity labelling framework for IoT products, enabling consumers and procurement professionals to make informed security…