Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: ISO/IEC 27701:2025 Implementer Certified (27701-IC)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 52 questions: 65% scenarios / 35% conceptual
• Exam Duration: 100 minutes
• Passing Score: 70% (37 out of 52 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 14 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• Privacy fundamentals and regulatory framework (15%): Personal data protection principles; Structure of ISO/IEC 27701:2025; Controller, processor, sub-processor, DPO and data subject; GDPR, CCPA/CPRA and national laws; Privacy by design and by default.
• Context of the organization and leadership (10%): Interested parties and privacy requirements; PIMS scope; Privacy policy; Roles: DPO and privacy committee; Internal and external communication.
• PIMS planning (15%): Privacy risk assessment; Record of processing activities (ROPA); Impact assessment (PIA/DPIA); Objectives, implementation plan and KPIs.
• PIMS operational implementation (25%): Annex A controls for controllers and processors; Annex B implementation guidance; Data subject rights and consent; Incidents, breaches and notification; Suppliers, processors and international transfers; Anonymization and pseudonymization.
• Evaluation, auditing and continual improvement (15%): PIMS performance evaluation; Internal audit with ISO 19011; Management review; Nonconformities and corrective actions; Preparing for certification.
• Integration with the ISMS and regulatory compliance (10%): Integration with ISO/IEC 27001 and common controls; ISO 9001 and ISO 22301; Evidence of GDPR compliance; Regulated sectors.
• Tools, techniques and best practices (10%): Consent and preference management; Personal data inventories and flows; PIA/DPIA methodologies; Zero trust and privacy-enhancing technologies (PET).

Who is this certification for?

• Data protection professionals and DPOs: Who need to implement and manage a PIMS in accordance with ISO/IEC 27701.
• Privacy and information security consultants: Who advise organizations on implementing privacy management systems.
• Information security professionals: Who manage an ISMS and need to integrate the privacy dimension.
• Regulatory compliance leads: Who must ensure compliance with the GDPR, the CCPA and national data protection laws.
• IT leads and solution architects: Who design systems with personal data protection requirements.

Prerequisites

No mandatory prerequisites. 27701-IC is the starting point of the CertJoin ISO/IEC 27701 path and gives access to ISO/IEC 27701:2025 Internal Auditor Certified (27701-IAE) and then to ISO/IEC 27701:2025 Lead Auditor Certified (27701-LA).