- Duration
- 3 days
- Level
- Implementer
- Formats
- Virtual instructor-led, In-house
- CPD hours
- 21
Course overview
A three-day course on implementing a privacy information management system (PIMS) based on the standalone ISO/IEC 27701:2025. You learn how to design a PIMS for controllers and processors, run data protection impact assessments, handle data subject rights and map the system to GDPR, India’s DPDP Act and GCC privacy laws.
Why attend
- Build a certifiable privacy programme that works across jurisdictions
- Understand the 2025 standalone structure and what changed from 2019
- Get practical tools for records of processing, DPIAs and rights handling
- Prepare for ISO/IEC 27701 certification
Who should attend
- Privacy officers and DPOs
- Legal and compliance teams
- Security managers
Learning objectives
- Design a standalone or integrated PIMS
- Implement controller and processor controls
- Map to GDPR, DPDP and PDPL
Course agenda
Day 1Privacy foundations and the PIMS
- Privacy principles (ISO/IEC 29100)
- Overview of GDPR, DPDP, UAE and Saudi PDPL
- ISO/IEC 27701:2025 structure
- Context, scope and controller or processor roles
Day 2Designing privacy controls
- Records of processing and data mapping
- Lawful basis, notices and consent
- Data subject rights
- Data protection impact assessments
- Processors, transfers and contracts
Day 3Operating and certifying the PIMS
- Privacy incident and breach management
- Monitoring, internal audit and management review
- Mapping controls to laws
- Certification and transition from the 2019 edition
- Written assessment
Prerequisites
Basic knowledge of data protection principles. ISO/IEC 27001 familiarity is helpful but no longer required.
Assessment and certificate
Written assessment. A scenario-based written assessment on the final day, open book, covering the requirements and their practical application. Pass mark 70%. Participants who pass receive a certificate of achievement; others receive a certificate of attendance.
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube.
What is included
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions
Dates
Public dates are announced regularly. Enquire below for the next date, or book a private session for your team on dates that suit you.