This International Standard provides a privacy framework which<\/p>\n
specifies a common privacy terminology;<\/p>\n<\/li>\n
defines the actors and their roles in processing personally identifiable information (PII);<\/p>\n<\/li>\n
describes privacy safeguarding considerations; and<\/p>\n<\/li>\n
provides references to known privacy principles for information technology.<\/p>\n<\/li>\n<\/ul>\n
This International Standard is applicable to natural persons and organizations involved in specifying, procuring, architecting, designing, developing, testing, maintaining, administering, and operating information and communication technology systems or services where privacy controls are required for the processing of PII.<\/p>\n
| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 2<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
| 4<\/td>\n | European foreword Endorsement notice <\/td>\n<\/tr>\n | ||||||
| 6<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
| 7<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
| 9<\/td>\n | 1 Scope 2 Terms and definitions <\/td>\n<\/tr>\n | ||||||
| 12<\/td>\n | 3 Symbols and abbreviated terms <\/td>\n<\/tr>\n | ||||||
| 13<\/td>\n | 4 Basic elements of the privacy framework 4.1 Overview of the privacy framework 4.2 Actors and roles 4.2.1 PII principals 4.2.2 PII controllers 4.2.3 PII processors <\/td>\n<\/tr>\n | ||||||
| 14<\/td>\n | 4.2.4 Third parties 4.3 Interactions <\/td>\n<\/tr>\n | ||||||
| 15<\/td>\n | 4.4 Recognizing PII 4.4.1 Identifiers 4.4.2 Other distinguishing characteristics <\/td>\n<\/tr>\n | ||||||
| 16<\/td>\n | 4.4.3 Information which is or might be linked to a PII principal 4.4.4 Pseudonymous data <\/td>\n<\/tr>\n | ||||||
| 17<\/td>\n | 4.4.5 Metadata 4.4.6 Unsolicited PII 4.4.7 Sensitive PII <\/td>\n<\/tr>\n | ||||||
| 18<\/td>\n | 4.5 Privacy safeguarding requirements <\/td>\n<\/tr>\n | ||||||
| 19<\/td>\n | 4.5.1 Legal and regulatory factors 4.5.2 Contractual factors <\/td>\n<\/tr>\n | ||||||
| 20<\/td>\n | 4.5.3 Business factors 4.5.4 Other factors <\/td>\n<\/tr>\n | ||||||
| 21<\/td>\n | 4.6 Privacy policies 4.7 Privacy controls <\/td>\n<\/tr>\n | ||||||
| 22<\/td>\n | 5 The privacy principles of ISO\/IEC 29100 5.1 Overview of privacy principles 5.2 Consent and choice <\/td>\n<\/tr>\n | ||||||
| 23<\/td>\n | 5.3 Purpose legitimacy and specification 5.4 Collection limitation <\/td>\n<\/tr>\n | ||||||
| 24<\/td>\n | 5.5 Data minimization 5.6 Use, retention and disclosure limitation 5.7 Accuracy and quality <\/td>\n<\/tr>\n | ||||||
| 25<\/td>\n | 5.8 Openness, transparency and notice 5.9 Individual participation and access <\/td>\n<\/tr>\n | ||||||
| 26<\/td>\n | 5.10 Accountability 5.11 Information security <\/td>\n<\/tr>\n | ||||||
| 27<\/td>\n | 5.12 Privacy compliance <\/td>\n<\/tr>\n | ||||||
| 28<\/td>\n | Annex A (informative) Correspondence between ISO\/IEC 29100 concepts and ISO\/IEC 27000 concepts <\/td>\n<\/tr>\n | ||||||
| 29<\/td>\n | Bibliography <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Information technology. Security techniques. Privacy framework<\/b><\/p>\n |