本文件规定了建立、实施、维护和持续改进隐私信息管理系统（PIMS）的要求。 提供指导以协助实施本文件中的控制措施。 本文件适用于对PII处理负责的PII控制者和PII处理者。 本文件适用于所有类型和规模的组织，包括公共和私营公司、政府实体和非营利组织。

This document specifies requirements for establishing, implementing, maintaining and continually improving a privacy information management system (PIMS). Guidance is provided to assist in the implementation of the controls in this document. This document is intended for PII controllers and PII processors holding responsibility and accountability for PII processing. This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations.