ISO/IEC 27018, also known as the "Cloud Privacy Protection Certification", was developed by the British Standards Institution (BSI). It is an international standard certification specifically designed for cloud service providers (CSPs) to safeguard personal data in cloud environments. The standard aims to provide a code of practice for organizations handling personal identifiable information (PII) in public clouds, ensuring robust protection against unauthorized access, breaches, or misuse. Recognized globally as one of the most authoritative, rigorous, and widely adopted information security certifications, ISO/IEC 27018 serves as a benchmark for cloud privacy compliance.
Scope of Application and Categories of Certified Organizations
ISO 27018 certification is applicable to organizations of all sizes and sectors that store or process PII in public cloud environments (e.g., payroll data, tax records, customer payment details). Key sectors adopting this certification include:
Benefits of Achieving ISO 27018 Certification for Public Cloud Personal Information Security