Privacy & Data Protection Training

ISO 27701 Training
Data Privacy Management Systems

Develop the skills to implement and audit privacy management systems that comply with international standards and ensure GDPR compliance.

GDPR Compliance

Align privacy practices with GDPR and international regulations

3 Training Tiers

Foundation to Implementer levels for all skill requirements

Industry Expert Led

Taught by certified privacy and data protection professionals

Course Overview

ISO 27701 extends ISO 27001 to address privacy information management, providing a framework for establishing, implementing, maintaining, and continually improving a Privacy Information Management System (PIMS).

This comprehensive training program equips professionals with the knowledge and skills to implement robust privacy management systems that ensure compliance with GDPR, CCPA, and other international privacy regulations.

Integration with ISO 27001

ISO 27701 works as an extension to ISO 27001, adding specific privacy controls and requirements. Organizations certified to ISO 27001 can extend their certification to include ISO 27701 for comprehensive information security and privacy management.

Target Industries

H
Healthcare & Medical
F
Fintech & Banking
T
Technology & Cloud
E
E-commerce & Retail
G
Government & Public
A
Any PII Processing
1

Foundation Course

Understanding ISO 27701 fundamentals and privacy management basics for all professionals

Target Audience

Professionals new to ISO 27701, privacy officers, compliance teams, and anyone seeking to understand data protection and privacy management fundamentals.

Learning Outcomes

  • Understand core concepts of ISO 27701 and privacy management
  • Identify key privacy management requirements and controls
  • Recognize the benefits of ISO 27701 for GDPR compliance
  • Understand the relationship between ISO 27701 and ISO 27001
  • Learn privacy-by-design principles and implementation
  • Identify data subject rights and organizational obligations

Course Content

  • Introduction to privacy information management
  • ISO 27701 standard structure and requirements
  • GDPR and international privacy regulations overview
  • Privacy controls and safeguards
  • Data processing principles and lawful bases
  • Privacy impact assessment fundamentals
Duration8 hours (1 day)
PrerequisitesNone required
AssessmentMultiple choice exam
Delivery FormatsOnline, In-person, Self-paced
Course MaterialsSlides, guides, templates
CertificateAEC Foundation Certificate
CPD Hours8 hours
2

Internal Auditor Course

Develop skills to conduct internal audits of privacy management systems and ensure ongoing compliance

Target Audience

Internal auditors, privacy officers, compliance professionals, and those responsible for auditing or assessing privacy management systems within their organization.

Learning Outcomes

  • Conduct effective internal audits of ISO 27701-compliant privacy systems
  • Evaluate privacy risks, controls, and mitigation strategies
  • Apply ISO 19011 auditing principles to privacy management
  • Identify non-conformities and recommend corrective actions
  • Assess data subject rights processes and procedures
  • Audit privacy incident management and breach response

Course Content

  • ISO 19011 audit principles and methodology
  • Privacy management system audit planning
  • Privacy controls assessment and testing
  • Data processing audit techniques
  • Privacy impact assessment review
  • Audit reporting and follow-up procedures
  • Practical audit simulation exercises
Duration16 hours (2 days)
PrerequisitesFoundation or equivalent
AssessmentPractical case study + exam
Delivery FormatsOnline, In-person, Hybrid
Course MaterialsAudit tools, templates, checklists
CertificateAEC Internal Auditor Certificate
CPD Hours16 hours
3

Implementer Course

Master the implementation and management of comprehensive privacy information management systems

Target Audience

Privacy managers, data protection officers, consultants, and senior professionals responsible for implementing and managing ISO 27701 privacy systems in their organization.

Learning Outcomes

  • Lead the implementation of privacy management systems based on ISO 27701
  • Establish and manage comprehensive privacy risk frameworks
  • Develop policies, procedures, and strategies for ISO 27701 compliance
  • Design and implement privacy-by-design processes
  • Manage data subject rights and privacy incident response
  • Create sustainable privacy governance and oversight programs

Course Content

  • Privacy management system design and architecture
  • Implementation project planning and management
  • Privacy risk assessment and treatment methodology
  • Policy development and procedure documentation
  • Privacy impact assessment design and execution
  • Data subject rights management implementation
  • Privacy incident management and breach response
  • Real-world implementation project simulation
Duration24 hours (3 days)
PrerequisitesInternal Auditor or equivalent
AssessmentImplementation project + exam
Delivery FormatsOnline, In-person
Course MaterialsImplementation toolkit, templates
CertificateAEC Implementer Certificate
CPD Hours24 hours

Course Pricing

Professional training investment with group discounts available

Tier 1

Foundation

$695
per participant
  • 8 hours of expert instruction
  • Digital course materials
  • Privacy management templates
  • AEC Foundation Certificate
  • 8 CPD hours
  • 1 year access to resources
Enroll Now
Tier 3

Implementer

$1,995
per participant
  • 24 hours of advanced training
  • Implementation project work
  • Complete implementation toolkit
  • Risk assessment templates
  • AEC Implementer Certificate
  • 24 CPD hours
  • 3 years access to resources
Enroll Now

Group Discounts: 10% off for 3–5 participants • 15% off for 6–10 participants • 20% off for 11+ participants

Request Group Pricing

Lead Auditor Course

Advanced lead auditor certification for ISO 27701 is under development

Coming Soon

Join our waiting list to be notified when the Lead Auditor course becomes available

Join Waiting List

Certification & Recognition

🎓

Digital Certificates

Secure, verifiable digital certificates with QR codes for each tier completed. LinkedIn integration available for professional profile enhancement.

📊

CPD Hours

All courses provide continuing professional development hours: Foundation (8h), Internal Auditor (16h), Implementer (24h).

🌎

Global Recognition

AEC certificates are recognized worldwide by privacy professionals and organizations implementing privacy management systems.

Frequently Asked Questions

What is the difference between ISO 27701 and ISO 27001? +

ISO 27001 focuses on information security management, while ISO 27701 extends ISO 27001 to specifically address privacy information management. ISO 27701 adds privacy-specific controls and requirements to help organizations manage personally identifiable information (PII) and comply with privacy regulations like GDPR.

Is there any prerequisite for attending the Internal Auditor course? +

Yes, we recommend completing the Foundation course or having equivalent knowledge of ISO 27701 basics. Understanding of privacy management principles and GDPR fundamentals is beneficial but not mandatory.

Will I get a certification after completing the Implementer course? +

Yes, upon successful completion of the assessment, you will receive an AEC Implementer Certificate for ISO 27701. This includes 24 CPD hours and demonstrates your competency in implementing privacy management systems.

Can I take the courses virtually or only in-person? +

All courses are available in multiple formats: online instructor-led, in-person workshops, and hybrid delivery. The Foundation course is also available as self-paced eLearning for maximum flexibility.

How does ISO 27701 help with GDPR compliance? +

ISO 27701 provides a structured framework for managing privacy that aligns with GDPR requirements. It helps organizations implement privacy-by-design, manage data subject rights, conduct privacy impact assessments, and establish incident response procedures required for GDPR compliance.

How long after completing the course will I receive my certification? +

Digital certificates are issued within 5 business days of successful course completion. You will receive an email with your verifiable digital certificate and instructions for adding it to your LinkedIn profile.

Additional Resources

Course Brochure

Comprehensive overview of all ISO 27701 training tiers with learning outcomes and pricing details.

Download PDF

Privacy Management Whitepaper

In-depth guide to implementing privacy management systems and achieving GDPR compliance.

Download Guide

Sample Course Materials

Preview of training materials including templates, checklists, and assessment examples.

Download Samples

Start Your Privacy Management Journey

Join hundreds of privacy professionals who trust AEC for ISO 27701 training and certification