When the International Standards Organization published earlier this month the world's first international standard to help organizations manage information privacy, it noted that digital privacy has "become a significant business concern." No doubt this has been demonstrated on the enforcement front in recent months. The new standard, ISO/IEC 27701, is an extension of ISO/IEC 27001 — the commonly adopted security standard — and "specifies the requirements for establishing, implementing, maintaining and continually improving a privacy-specific information security management system," according to the ISO. On Monday, OneTrust announced it was the first organization to achieve certification under ISO 27701. In this post for Privacy Tech, IAPP Editorial Director Jedidiah Bracy, CIPP, talks with OneTrust Director of Privacy Andrew Clearwater, CIPP/US, about the standard and why this is an opportune moment for privacy pros around the world.  
Full Story