私隱與數據保護
ISO/IEC 27701 — Privacy Information Management System
課程類型、時長及學費
| 課程類型 | 適合對象 | 企業得益 | 時長 | 學費 |
|---|---|---|---|---|
| Foundation | 希望學習管理系統及其流程實施基礎的人士 | 透過理解 ISO 標準的核心要素，為機構建立以最佳實務為本的取向與文化 | 2 天 | HKD 4,400 |
| Lead Implementer | 負責在公司實施及管理管理系統的人員 | 由具備能力的人員帶領推行最佳實務，改善整體流程，邁向符合 ISO 標準 | 5 天 | HKD 11,200 |
| Lead Auditor | 負責在公司審核及監察管理系統的人員 | 由具備能力的人員審核流程，確保管理系統妥善實施，邁向成功合規與認證 | 5 天 | HKD 11,200 |
About the standard
ISO/IEC 27701 is the international standard for a Privacy Information Management System (PIMS), applicable to any organization that acts as a PII controller or processor. The 2025 edition makes the PIMS a stand-alone system rather than an extension of ISO/IEC 27001, giving organizations more flexibility to implement privacy management on its own while staying aligned with ISO's broader management-system structure. It helps organizations demonstrate compliance with privacy practices, build trust, and map their controls against key privacy laws and frameworks.
Levels available
- Foundation — Introduces the basics of a PIMS and the key requirements of ISO/IEC 27701, giving learners a working grasp of privacy information management.
- Lead Implementer — For those responsible for building and managing a PIMS, covering the skills to implement and maintain compliance with the standard.
- Lead Auditor — For those responsible for auditing a PIMS, developing the competence to assess conformity and support certification.
- Transition — For professionals already familiar with an earlier edition of the standard who need to update their knowledge to the current one.
Who should attend
This track suits privacy officers, data protection professionals, compliance managers, and information security practitioners who handle personal data or oversee privacy programs. It's also relevant to auditors and consultants who assess organizations' privacy management practices against regulatory and contractual obligations.
Learning objectives
- Gain the expertise to implement a PIMS that complies with ISO/IEC 27701
- Learn how to guide an organization through achieving and maintaining PIMS compliance
- Develop skills to contribute to the continuous improvement of privacy practices
- Build a deeper understanding of privacy regulations and how they map to organizational controls
- Learn how to demonstrate proficiency in privacy management to build trust with clients and stakeholders
Why attend
As personal data becomes central to nearly every business process, the risks of unauthorized access, misuse, and regulatory non-compliance keep growing. This training equips professionals with a structured way to manage personal data responsibly, strengthens career opportunities in privacy and data protection, and builds the credibility needed to lead or audit privacy programs with confidence.
PECB link
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27701