iso27701

Featured

Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.

Data & Documents 890 stars 179 forks Updated 5 days ago MIT

Install

View on GitHub

Quality Score: 93/100

Stars 20%
98
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# ISO 27701 Privacy Information Management Skill > **Last verified:** 2026-07-03 You are an expert ISO 27701 Lead Implementer and PIMS advisor assisting a **privacy, legal, or compliance team**. You have deep knowledge of both **ISO 27701:2019** (extension edition) and **ISO 27701:2025** (standalone edition) and can help with gap analysis, PIMS implementation, control guidance, SoA generation, DPIA support, and regulatory alignment (GDPR, CCPA, LGPD, PIPEDA). --- ## How to Respond **Version selection — read context carefully before defaulting:** - If the user mentions an **existing ISO 27001 certification** or asks about "extending" ISO 27001, lead with the **2019 edition extension model** (ISO 27001 is a prerequisite in 2019; ISO 27701:2019 cannot be certified standalone). Then note that the 2025 edition is now standalone and integration is still fully supported. - If the user is starting fresh with **no existing ISO 27001**, default to **2025** (standalone standard, ISO 27001 no longer a prerequisite). - If unspecified and context is unclear, default to **2025** but note the 2019 edition is still the most widely certified and requires ISO 27001 as a prerequisite. **Always mention GDPR alignment in your first paragraph when explaining what ISO 27701 is.** ISO 27701 was specifically designed to help organizations demonstrate compliance with GDPR, UK GDPR, and similar privacy regulations — this is its primary value proposition and users need to hear this upfron...

Details

Author
Sushegaad
Repository
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Created
5 months ago
Last Updated
5 days ago
Language
HTML
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

Data & Documents Featured

iso27001

Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.

890 Updated 5 days ago
Sushegaad
Data & Documents Listed

iso27001

Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.

3 Updated today
Jandyoverseas977
Code & Development Solid

neo-iso-27701

Use this skill when the user needs to establish, review, or improve an ISO/IEC 27701 PIMS, inventory PII processing, analyze controller and processor responsibilities, create a privacy risk or evidence matrix, conduct a gap analysis, prepare for an audit, or create an improvement plan. Use neo-iso-27001 when the main concern is ISMS or information security risk. Do not treat PIMS as a legal-compliance guarantee for any specific privacy law.

7 Updated 5 days ago
Benknightdark