PECB ISO/IEC 27701 Foundation Training: Privacy Management Essentials
This two-day course introduces the privacy information management system (PIMS) described in ISO/IEC 27701 and how it protects personal data in day-to-day operations. You will see how the standard fits with ISO/IEC 27001, ISO/IEC 27002 and other data protection frameworks. The course ends with the PECB Foundation exam.
The essentials
Publisher : PECB
Certification : PECB Certificate Holder in ISO/IEC 27701 Foundation
Duration : 2 days, 1-hour exam included on day 2 (14 CPD credits)
Level : Beginner
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : PECB Foundation exam · 1 h · on day 2
Exam voucher : Official PECB offer: exam and certification fees are included, plus one free exam retake within 12 months if you do not pass the first time.
Understand the concepts and principles of a PIMS under ISO/IEC 27701.
Relate ISO/IEC 27701 to ISO/IEC 27001, ISO/IEC 27002 and other data protection frameworks.
Tell apart the roles of personal data controller and processor.
Identify approaches for implementing and managing a PIMS.
Know what the 2025 edition means for an organization.
Pass the PECB ISO/IEC 27701 Foundation exam.
Program
Day 1 – PIMS concepts under ISO/IEC 27701
Privacy standards and frameworks
Personal data, controllers and processors
Data protection principles
Day 2 – The PIMS in practice and exam
Management system requirements
Privacy controls
Monitoring and improvement
Certificate exam
Prerequisites
PECB sets no prerequisites.
Some familiarity with information security or the GDPR helps but is not required.
Target audience
Information security and privacy professionals
Anyone who needs to understand PIMS processes
People who handle or look after personal data in their organization
Information security team members
Anyone aiming for a career in data protection
The exam
The one-hour exam takes place on day two, online through the PECB Exams app with remote proctoring or on paper through a partner. It covers two domains: the fundamental principles and concepts of a PIMS, and the management system itself. Once you pass and sign the PECB Code of Ethics, you hold the title "PECB Certificate Holder in ISO/IEC 27701 Foundation", with no work experience required. If you do not pass, one free retake is available within 12 months.
Preparation tips
Master the vocabulary: personal data, controller, processor, control, statement of applicability.
Sketch a diagram linking ISO/IEC 27701, 27001 and 27002; questions on how they fit together are common.
Review your day-one notes that evening; the exam follows soon after.
Frequently asked questions (FAQ)
What changed in ISO/IEC 27701:2025?
Published on 14 October 2025, the new edition turns ISO/IEC 27701 into a stand-alone management system standard: you no longer need to build it on top of an ISO/IEC 27001 ISMS. Some clauses and Annex A controls were added, changed or removed, and the terminology was updated.
Does ISO 27701 replace the GDPR?
No. The GDPR is a legal obligation; ISO/IEC 27701 is a voluntary framework. The standard helps you organize and demonstrate data protection, which supports regulatory compliance without replacing it.
Do I need to know ISO 27001 first?
It is not required. A grounding in information security helps, but the course covers the concepts you need.
What comes after Foundation?
ISO/IEC 27701 Lead Implementer if you will deploy a PIMS, Lead Auditor if you will assess one, or Certified Data Protection Officer if you are aiming for the DPO role.
Can I take the course online or in Casablanca?
Both. We run it as a live online class, in person in Casablanca, or on-site at your organization, taught in French or English depending on the group. For on-site sessions we can adapt examples and case studies to your sector and schedule the exam with you.