BS 10012:2017 +A1 2018 specifies the framework for implementing a personal information management system (PIMS) in compliance with the General Data Protection Regulation (GDPR).
This new version is an update to the 2009 edition of BS 10012, which was specific to the 1998 Data Protection Act.
The BS 10012:2017 +A1 2018 specification provides a framework to manage the risks to the privacy of personal data and implement the necessary policies, procedures and controls to help ensure compliance with the GDPR. It is designed to follow the plan-do-check-act cycle (PDCA) to ensure continual improvement.