# ISO/IEC 29100: Privacy framework

> Common privacy principles and terminology that underpin privacy programmes and ISO 27701.

URL: https://securei3.com/standards/iso-29100/
Category: Information security & privacy: Guidance standard
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


ISO/IEC 29100 sets out eleven privacy principles (such as consent and choice, purpose legitimacy, collection limitation, data minimisation and accountability) and a common vocabulary. We use it to design privacy programmes that work across GDPR, DPDP and GCC laws.

## Who it is for

- Privacy teams building multi-jurisdiction programmes

## Benefits

- A shared privacy language across teams

## How Secure iQube helps

1. **Maturity review**: Assess current practice against the guidance and agree what good looks like for your organisation.
2. **Framework design**: Translate the principles into a practical framework, roles and tools that fit your existing management systems.
3. **Embedding**: Workshops and coaching so teams apply the framework in day-to-day decisions.
4. **Review and reporting**: Periodic reviews and reporting that show progress to leadership and stakeholders.

## Frequently asked questions

### How does ISO 29100 relate to ISO 27701?

ISO 29100 provides principles; ISO 27701 turns them into a certifiable management system.

Related: https://securei3.com/standards/iso-27701/, https://securei3.com/standards/gdpr/

Contact: https://securei3.com/contact/: info@securei3.com