BS 10012 2017 +A1 2018 - Data protection - Specification for a personal information management system (PIMS)
BS 10012:2017+A1:2018 specifies the framework for implementing a personal information management system (PIMS) in compliance with the General Data Protection Regulation (GDPR).
This new version is an update to the 2009 edition of BS 10012:2017, which was specific to the 1998 Data Protection Act. The A1 2018 amendment takes in further small changes as a result of the UK Data Protection Act 2018.
The BS 10012:2017+A1:2018 specification provides a framework to manage the risks to the privacy of personal data and implement the necessary policies, procedures and controls to help ensure compliance with the GDPR. It is designed to follow the plan-do-check-act cycle (PDCA) to ensure continual improvement.