What is ISO/IEC 29101 about?
ISO/IEC 29101 focuses primarily on information and communication technology (ICT) systems that are designed to interact with PII principals. ISO/IEC 29101 defines a privacy architecture framework that:
- Specifies concerns for ICT systems that process PII;
- Lists components for the implementation of such systems; and
- Provides architectural views contextualizing these components
Who is ISO/IEC 29101 for?
ISO/IEC 29101 on privacy architecture framework is useful for the organization:
- Organizations involved in specifying, procuring, architecting, designing, testing, maintaining, administering, and operating ICT systems that process PII
Why should you use ISO/IEC 29101?
ISO/IEC 29101 describes a high-level architecture framework and associated controls for the safeguarding of privacy in information and communication technology (ICT) systems that store and process personally identifiable information (PII).
The privacy architecture framework described in ISO/IEC 29101:
- Provides a consistent, high-level approach to the implementation of privacy controls for the processing of PII in information and communication technology (ICT) systems
- Provides guidance for planning, designing, and building information and communication technology (ICT) system architectures that safeguard the privacy of PII principals by controlling the processing, access, and transfer of personally identifiable information
- Shows how privacy-enhancing technologies (PETs) can be used as privacy controls
ISO/IEC 29101 builds on the privacy framework provided by ISO/IEC 29100 to help an organization define its privacy safeguarding requirements as they relate to PII processed by any information and communication technology (ICT) system.