Privacy Information Management
Stand-alone international standard for privacy information management systems (PIMS). Addresses GDPR and other privacy regulatory frameworks through a structured management approach.
ISO/IEC 27701 is a stand-alone privacy information management system standard, providing requirements and guidance for protecting personally identifiable information (PII). While it extends ISO/IEC 27001 and ISO/IEC 27002 with privacy-specific controls, the 2025 revision makes it usable independently of those standards.
The standard maps to major privacy regulations including GDPR, CCPA, and similar frameworks, providing organisations with a structured approach to demonstrating privacy compliance. It includes specific requirements for both PII controllers and PII processors.
ACI-certified auditors assess PIMS design and operational effectiveness, review controller and processor-specific requirements, and evaluate the adequacy of privacy risk management and data subject rights processes.
Attend an ACI-Approved Training Provider (ATP) course for your chosen grade level. ACI-approved courses are aligned to the examination syllabus for ISO/IEC 27701.
Examinations are administered exclusively through ACI Approved Training Providers. Foundation and Internal Auditor examinations require 70% to pass; Lead Auditor requires 65%.
Submit your application through the ACI portal with your examination result, training certificate, and relevant audit experience log. Upon approval you receive your ACI Card ID and digital certificate.
Available Grades for ISO/IEC 27701
All six ACI auditor grades are available for this scheme. Each grade has defined competence, experience, and examination requirements.
Entry-level certification for those beginning their auditing career. Suitable for individuals who have completed foundation training but have limited audit experience.
For auditors who have completed Internal Auditor training and have begun accumulating audit experience under supervision or in an internal audit role.
Full auditor grade for practitioners with demonstrated audit experience. Recognised as a competent independent auditor of management systems.
Senior grade for experienced auditors capable of leading audit teams and managing full audit programmes. The most widely recognised auditor grade internationally.
Advanced grade for highly experienced auditors demonstrating sustained performance in complex audit environments and contributions to the auditing profession.
The highest ACI designation, awarded to individuals who have made an exceptional contribution to the management system auditing profession and to the ACI community.
Find an Approved Training Provider, sit the examination, and submit your application to ACI.