27555ISO 27555 Revision CheckerEdition 2 draft · stage 40.60

Home / Answers / Is ISO 27555 certifiable?

Answer · from the public record

Is ISO 27555 certifiable?

No certification scheme is named on the ISO record. The document is guidance for developing policies and procedures for PII deletion. It is not a management system standard with an accredited certificate, and there is no transition audit attached to the new edition.

Last updated: 2026-10-22. Evidence level: public record and public sample. The licensed text is not reproduced.

What the record shows

The ISO record gives the designation, edition, stage, page count, committee and ICS. It does not name a certification scheme, an accreditation body or a conformity assessment route. That absence is the answer: an organisation cannot be certified against this document in the way it can be certified against a management system standard.

What that means for a buyer

A CISO should not put a certificate on a slide. The honest use is a policy and procedure framework that an auditor can inspect as part of a wider privacy or information security audit. The evidence is the register, the period specification, the deletion class matrix and the completion records, not a certificate.

Why suppliers still ask

Buyers often meet the number in a supplier questionnaire or a privacy programme description. A supplier can say it follows the guidance and show its deletion framework. That is a statement about practice, not a certificate, and it should be worded that way.

The date is internal

Because there is no accreditation transition, the date that matters is the one the organisation sets for its own policy update. The planning date on this site is an estimate from the ISO stage and is labelled as one. It is a scheduling device, not a deadline imposed by a scheme.

What to do instead

Map the ten clauses to the deletion procedure, keep the evidence, and re-read the text when ISO publishes the replacement. If the organisation runs a privacy information management system, the deletion framework can be presented as supporting evidence for the retention and deletion controls in that system.

Check the source. The full record, the stage trail and the clause pages are free. Start with how the record handles evidence.

Related