Plain answer

What is ISO/IEC FDIS 27091?

ISO/IEC FDIS 27091 is the final draft of a first-edition international standard on privacy protection in artificial intelligence. It is 35 pages, prepared by ISO/IEC JTC 1/SC 27, and registered for formal approval on 13 July 2026.

The record

The ISO page gives the designation ISO/IEC FDIS 27091, Edition 1, 35 pages, technical committee ISO/IEC JTC 1/SC 27, and the ICS codes 35.030 and 35.240.01. The stage is 50.00, final text received or FDIS registered for formal approval, recorded on 13 July 2026.

The subject

In our reading, the abstract sets out how an organization should deal with privacy risk in AI systems and in machine-learning models: find that risk across the life of the system, judge what it could do to people, and decide how to treat it. The ISO wording is not reproduced here.

The population

The abstract reaches organizations of every size and kind, naming private firms, public bodies, government and not-for-profit organizations among those that build AI systems or use them. That covers buyers and users of AI, not only the companies that build models.

What it is not

It is a draft, not a published standard. It is not a management system standard that a certificate can be issued against, and it does not replace ISO/IEC 42001:2023 or ISO/IEC 27701. The text is not public and is not reproduced on this site.