Privacy management · PECB Authorized Partner

ISO/IEC 27701:2025: make privacy a clear management responsibility.

Organise privacy practices, develop a PIMS or assess its effectiveness. Compare four PECB learning paths and choose the perspective that fits your next responsibility.

Compare learning paths Discuss your needs

The 2025 edition stands on its own

ISO/IEC 27701:2025 defines an independent privacy information management system, or PIMS. Unlike the 2019 edition, it does not depend on a mandatory extension of ISO/IEC 27001. Integration with an existing ISMS remains possible.

In practice, the focus is responsibilities, risks, controls and traceable processes. Choose whether you need to contribute, implement, audit or update existing knowledge.

Four routes to the PIMS knowledge you need

Choose by responsibility. Transition concentrates on the changes from the 2019 edition; it does not replace a full introductory or Lead course.

PECB course

ISO/IEC 27701:2025 Foundation

Understand the fundamentals

For privacy, security and project teams and business representatives.

Content and focus: PIMS concepts, roles, requirements and the relationship with other management systems.
Prior knowledge: No formal course prerequisites.
Duration: 2 days

PECB course

ISO/IEC 27701:2025 Lead Implementer

Establish and operate a PIMS

For privacy leads, project managers and consultants.

Content and focus: Plan, implement, monitor and continually improve a PIMS.
Prior knowledge: A fundamental understanding of privacy.
Duration: 5 days · 4 training days + exam

PECB course

ISO/IEC 27701:2025 Lead Auditor

Audit a PIMS using evidence

For auditors and compliance or privacy professionals.

Content and focus: Prepare audits, evaluate evidence, report findings and manage audit programmes.
Prior knowledge: Basic information security and privacy knowledge, plus comprehensive audit principles.
Duration: 5 days · 4 training days + exam

PECB course

ISO/IEC 27701:2025 Transition

Update existing knowledge

For people familiar with the 2019 edition.

Content and focus: Understand revised requirements, terminology and controls in the 2025 edition.
Prior knowledge: Prior knowledge of ISO/IEC 27701:2019 is recommended for a useful starting point.
Duration: 2 days

See the individual course page for the current price and available formats.

Make the course decision practical

Think about the next decisions you will need to prepare for your organisation.

Build a shared understanding

Business and project teams benefit from a common vocabulary and clear responsibilities. A shared foundation makes later discussions more productive.

Develop an existing approach

Define a concrete implementation or improvement question: where are responsibilities, reliable processes or traceable decisions still missing?

Explain assessments convincingly

Audit findings need to be understandable and supported by evidence. Which audit skills would you like to strengthen?

Learn live and discuss your questions

Full courses take place live online or in person. Discuss your professional questions with the trainer; your learner portal provides practical information and materials.

Teaching is available in German, English or Hungarian. Hungarian refers to the teaching language; available examination and material languages are agreed separately. In-person training includes catering and time to talk with the trainer after class, without overnight accommodation.

Understand what your credential demonstrates

Attendance, passing the exam and receiving a PECB credential are separate steps. Apply to PECB after passing. The level awarded depends on its requirements and any required professional, project or audit experience. A Lead course alone does not confer a Lead credential.

Questions about ISO/IEC 27701:2025 and course selection

Does a PIMS under the 2025 edition require ISO 27001?

No. ISO/IEC 27701:2025 is an independent management system standard. An existing ISMS can be integrated, but it is no longer the required foundation implied by the former extension structure.

When is Transition the right choice?

Choose it when you already work with ISO/IEC 27701:2019 and want to understand the 2025 changes. Foundation is generally a more suitable orientation for someone new to the topic.

Is Foundation mandatory before a Lead course?

A Foundation certificate is not a blanket prerequisite. The stated prior knowledge matters; Lead Auditor also requires sound audit principles.

Which course is appropriate for a data protection officer?

Choose by task: Lead Implementer for building a PIMS, Lead Auditor for audits, or Foundation for initial orientation. The job title alone does not determine the path.

Does the course automatically appoint me as a data protection officer?

No. Training or a PECB credential does not replace a separate appointment or assessment of suitability for the specific role. PIMS competence is a distinct professional focus.

Does a PIMS guarantee GDPR compliance?

No. A management system supports organised privacy practices, but it does not replace assessment of actual processing activities and applicable legal requirements. Attending the course does not certify your organisation either.

Is my existing personal PECB credential immediately invalid?

A revised standard does not automatically invalidate existing credentials. Your status and PECB’s current maintenance or transition rules matter. Ask PECB to confirm your case.

Which prices and formats apply?

Product pages show current prices and formats. We agree dates, teaching language, and examination and material languages separately.

What would you like to take responsibility for next?

Tell us about your role, experience and goal. We will help you choose a course, format and teaching language. For teams, we take different responsibilities into account.

Arrange a consultation

Self-employed in Germany? Ask us about KOMPASS before booking. A KOMPASS advisory point assesses your individual eligibility and the proposed training.

All courses

Official course information

Course information checked on 31 October 2026.