Who it applies to
- Companies with an ISO 27001 program that also need privacy assurance.
- Processors and controllers handling customer or employee personal data.
- Teams receiving GDPR and privacy governance questions from buyers.
What you need to do
- Define privacy roles, processing responsibilities, and control ownership.
- Maintain privacy risk, vendor, and evidence records.
- Connect privacy controls to the broader ISMS.
How to use this entry
- Use this page to understand the buyer or regulatory pressure before it becomes a deadline.
- Run the regulation checker to see whether this area is likely to matter for your company now.
- If it becomes relevant, Kaamos can help you scope the gap and turn it into prioritized security work.