A collection of privacy practices. It builds off of ISO 27001 by taking security from a privacy standpoint. Aligned with GDPR and CCPA