ISO/IEC FDIS 27091: what is known, and what is not

ISO/IEC FDIS 27091 is the first edition of the privacy protection guidance for AI systems. It is in the approval phase: stage 50.00 was recorded on 13 July 2026 and the FDIS ballot and publication follow. It is not published, it cannot be certified against, its text is not public, and its clause structure is not stated on any page here. This page separates what the record proves from what a summary reports and what is our estimate.

The ISO page records stage 50.00 and the earlier dates. Stages 50.20, 50.60, 60.00 and 60.60 are listed without a date. The site does not infer an outcome or a date.

Read plainly, the abstract says the document sets out how an organization should deal with privacy risk in AI systems and in machine-learning models. It asks for that risk to be found across the life of the system, for the consequences to be judged, and for a decision on how to treat them. It reaches organizations of every size and kind, naming private firms, public bodies, government and not-for-profit organizations among those that build AI systems or use them. The ISO wording is not reproduced on this site.

That is the whole of the public description. It names a subject (privacy risk), a path (identify, evaluate, treat) and a population (any organization that develops or uses AI systems). It does not publish a control, a technique, a defined term or a clause.

Buyers ask whether the draft replaces the AI management system standard. It does not. ISO/IEC 42001:2023 is the standard a certificate is issued against; 27091 is privacy guidance in its first edition. The two do different jobs, and the control pages read the one that applies today.

Stage dates to 50.00 are from the ISO page. Later dates are blank because ISO has not recorded them. Publication is expected in 2027. The planning date of 18 February 2027 is an estimate, labelled wherever it appears.