ISO/IEC DIS 27555

International

vDIS, stage 40.60, close of voting 2026-08-22

2 domains

10 controls

ISO/IEC DIS 27555:2026 Information security, cybersecurity and privacy protection: Guidelines on personally identifiable information deletion

Draft edition, not yet published.

Verified

ISO/IEC DIS 27555 is a compliance framework from International with 2 domains and 10 controls. The largest domains are Clause 5 to 10: The deletion framework (6 controls), Clause 1 to 4: Scope, references, terms and symbols (4 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (2)

Clause 1 to 4: Scope, references, terms and symbols

4 controls

Clause 1 to 4: Scope, references, terms and symbols

Controls in the Clause 1 to 4: Scope, references, terms and symbols domain of ISO/IEC DIS 27555: 4 controls
Code	Title	Description
iso-iec-dis-27555::1	Scope	The draft is guidance for the policies and procedures an organisation uses to delete personally identifiable information...
iso-iec-dis-27555::2	Normative references	One document is normative: ISO/IEC 29100:2011, the privacy framework. Its principles supply the reason deletion matters,...
iso-iec-dis-27555::3	Terms and definitions	Ten defined terms carry the method: cluster of PII, data object, deletion, deletion class, deletion rule, deletion perio...
iso-iec-dis-27555::4	Symbols and abbreviated terms	The clause lists the abbreviations the draft uses. The DIS adds solid state disk and write once read many storage to the...

Clause 5 to 10: The deletion framework

6 controls

Clause 5 to 10: The deletion framework

Controls in the Clause 5 to 10: The deletion framework domain of ISO/IEC DIS 27555: 6 controls
Code	Title	Description
iso-iec-dis-27555::10	Responsibilities	Clause 10 closes the loop on ownership. It covers the general allocation of responsibility, the documentation that prove...
iso-iec-dis-27555::5	Framework for deletion	Clause 5 is the method. An organisation names its clusters of PII by purpose, sets retention and deletion periods, group...
iso-iec-dis-27555::6	Clusters of PII	Clause 6 turns the cluster idea into an exercise: identify the clusters by purpose, then document each one so that a rea...
iso-iec-dis-27555::7	Specification of deletion periods	Clause 7 is where periods become specifications. It separates standard from regular periods, says how to identify the st...
iso-iec-dis-27555::8	Deletion classes	Clause 8 makes the rule set manageable. It defines abstract starting points, builds a matrix of deletion classes, and sh...
iso-iec-dis-27555::9	Requirements for implementation	Clause 9 is the largest clause and the one the DIS expands most. It covers organisation wide aspects such as backup, log...

What is ISO/IEC DIS 27555 and who does it apply to?

ISO/IEC DIS 27555 is a compliance framework from International with 2 domains and 10 controls. ISO/IEC DIS 27555:2026 Information security, cybersecurity and privacy protection: Guidelines on personally identifiable information deletion It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO/IEC DIS 27555 actually require?

ISO/IEC DIS 27555 has 10 controls organised across 2 domains. The largest domains are Clause 5 to 10: The deletion framework (6 controls), Clause 1 to 4: Scope, references, terms and symbols (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO/IEC DIS 27555 do I already cover?

ISO/IEC DIS 27555 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement ISO/IEC DIS 27555?

Start your ISO/IEC DIS 27555 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO/IEC DIS 27555 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 10 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,111 frameworks.

Get Started Free →

Free forever, no credit card required