Data Protection/Privacy Mapping Project

The Data Protection/Privacy Mapping Project (the “Project”) facilitates consistent global comprehension and implementation of data protection with an open source mapping between ISO/IEC 27701 and global data protection and/or privacy laws and regulations. Principles Neutral – The project is not for profit and carries no affiliation or company-driven focus. Open – The data, infrastructure, and processes are available to all Consensus – Mapping data can at times be subjective, but consensus can be achieved through engagements with stakeholders Transparent – The operations and decision-making process for this project is transparent Scope The Project aims to make the link between ISO/IEC 27001 and data protection comprehensible to privacy professionals. It seeks to continuously improve and expand the data map between ISO/IEC 27701 and data protection laws and regulations, especially that of regulatory requirements. Initial mapping data is based on existing mapping between ISO/IEC 27701 and GDPR, and additional mappings were prepared by outside counsel for Microsoft between ISO/IEC 27701 and regulations from Australia, California, Canada, Brazil, Hong Kong, Singapore, South Korea, and Turkey.