What is ISO/IEC 29101 about?
ISO/IEC 29101 focuses primarily on information and communication technology (ICT) systems that are designed to interact with personally identifiable information (PII) principals. ISO/IEC 29101 details an architecture framework which helps in safeguarding personally identifiable information. ISO/IEC 29101 defines a privacy architecture framework that:
- specifies concerns for ICT systems that process PII;
- lists components for the implementation of such systems; and
- provides architectural views contextualizing these components
Who is ISO/IEC 29101 for?
ISO/IEC 29101 on privacy architecture framework is useful for:
- Organizations involved in specifying, procuring, architecting, designing, testing, maintaining, administering, and operating information and communication technology (ICT) systems that process PII.
Why should you use ISO/IEC 29101?
ISO/IEC 29101 describes a high-level architecture framework and associated controls for the
safeguarding of privacy in information and communication technology (ICT) systems that store and process personally identifiable information (PII). The privacy architecture framework described in ISO/IEC 29101:
- Provides a consistent, high-level approach to the implementation of privacy controls for the processing of personally identifiable information (PII) in information and communication technology (ICT) systems;
- Provides guidance for planning, designing, and building information and communication technology (ICT) system architectures that safeguard the privacy of PII principals by controlling the processing, access, and transfer of personally identifiable information; and
- Shows how privacy enhancing technologies (PETs) can be used as privacy controls.