Annex B - PIMS-Specific Reference Control Objectives (Processors)

Annex B of ISO/IEC 27701:2019 lists the privacy-specific control objectives that organizations acting as data processors must implement within a Privacy Information Management System, extending the ISO/IEC 27001 framework with detailed requirements for handling personal data, managing consent, ensuring data minimisation, and addressing third-party and cross-border processing risks.