Fellow Digitals completes implementation of ISO 27701:2025
Blog | Privacy Standard
Fellow Digitals has implemented the new ISO 27701:2025 standard across the organization. This marks another step forward in protecting personal data and further strengthening our privacy policies. The implementation will be formally assessed during our internal audit in January 2027 and our external audit in April 2027.
Why this new privacy standard matters
We process personal data every day. This includes data from customers, users, employees, applicants and partners. They need to be able to trust that we handle this information with care.
ISO 27701 provides an internationally recognized framework for systematically managing and protecting personal data. The new 2025 version has also been developed as a standalone standard for privacy information management. This means organizations can implement the standard and obtain certification independently of ISO 27001. Learn more about ISO 27701:2025.
The international nature of the standard is particularly relevant to Fellow Digitals. We operate from the Netherlands, Germany and Singapore. This means we need to comply with different privacy laws, including the European GDPR – known as the AVG in the Netherlands and the DSGVO in Germany – and Singapore’s Personal Data Protection Act (PDPA).
ISO 27701:2025 helps us translate these different requirements into one consistent and auditable approach.
Building on a strong foundation
We have been working in accordance with ISO 27001, NEN 7510 and ISO 27701:2019 for several years. To prepare for the transition to the new standard, we reassessed our existing processes, procedures and responsibilities. Where necessary, we introduced new policies, updated existing ones and strengthened them further.
This includes:
defining responsibilities for handling personal data;
assessing and managing privacy risks;
retaining and deleting personal data on time;
demonstrating compliance with agreed procedures;
continuously monitoring and improving the way we work.
The implementation of ISO 27701:2025 has now been completed. That does not mean our work is finished. Privacy is not a one-off project, but a continuous process of monitoring, learning and improving.
The next step is independent assessment
Our two-day internal audit will take place in January 2027. It will be conducted by Henry Snijders of Kader Group in The Netherlands. Henry has supported our organization as an external security advisor for several years.
The external audit by Kiwa will follow in April. These audits will assess the extent to which our systems, processes and procedures meet the requirements of ISO 27701:2025, ISO 27001 and NEN 7510.
Only after the external audit will we know whether our transition to the new ISO 27701 standard has been formally confirmed. Until then, we will clearly communicate that the standard has been implemented but has not yet been externally audited.
We remain formally certified to the previous ISO 27701:2019 standard. Once we have been certified to the new standard, the new certification will replace the existing one.
A deliberate choice since 2019
Fellow Digitals has been certified to ISO 27001 and NEN 7510 since 2019. One year later, we added ISO 27701 to our certifications.
Our ambition goes beyond simply complying with privacy legislation. We want to demonstrate that information security and privacy are embedded in our organization and services.
We have continued to invest in this area over the past few years. In 2024, we implemented ISO 27001:2022. This was followed in 2025 by NEN 7510:2024, the information security standard for the healthcare sector. This year, we prepared for and completed the transition from ISO 27701:2019 to ISO 27701:2025.
This is how we keep our services secure, reliable and future-ready – for our own organization and for our customers.
Want to know more?
For more information about the implementation of ISO 27701 or how we have structured our security policies, please contact Rick Tigelaar, our COO.
We love to share our knowledge with you
Related blogs
