BS 10012:2017+A1:2018 specifies requirements for a personal information management system (PIMS), which provides a framework for maintaining and improving compliance with data protection requirements and good practice.

This British Standard is for use by organizations of any size and sector. It is intended to be used by those responsible for planning, establishing, implementing and maintaining a PIMS within an organization. It is intended to provide a common ground for the responsible management of personal information, for providing confidence in its management, and for enabling an effective assessment of compliance with data protection requirements and good practice by both internal and external assessors.


Cross References:
BS ISO 55001
Freedom of Information Act 2000
Data Protection Act 2018
BS EN ISO 9001
Data Protection (Charges and Information) Regulations
BS ISO/IEC 27018
BS ISO/IEC 20000
Data Protection Act 1998
Data Protection (Charges and Information) Regulations 2018
BIP 0012
PAS 99
BS EN ISO 14001
BS EN ISO 19011
BS ISO/IEC 27001
BS ISO 31000
Digital Economy Act 2017
BS ISO/IEC 20000-1:2011
PD ISO/TR 18128:2014
PD ISO GUIDE 73:2009
BS EN ISO 9000:2015


Incorporates the following:
Amendment, July 2018