neo-iso-27701

# Neo ISO/IEC 27701 Provide evidence-based assistance for establishing, improving, or reviewing a privacy information management system (PIMS). Read `references/sources-and-scope.md` first, then follow the workflow below. ## Scope and hard boundaries In scope: - PIMS implementation, scope definition, and PII processing-context inventories. - Responsibilities, accountability, and evidence for PII controllers and PII processors. - Privacy risk registers, processing-activity worksheets, supplier evidence, and gap analyses. - Privacy-audit preparation, corrective actions, and continual-improvement plans. Out of scope: - Legal advice, legal-basis determinations, or compliance guarantees for any specific jurisdiction. - Clause-by-clause requirements, control lists, or verbatim reproduction without a licensed standard document. - Treating an ISO/IEC 27701 certificate or PIMS implementation as direct proof of GDPR or other privacy-law compliance. - Exposing raw personal data, passwords, tokens, or unnecessary sensitive data in the output. ## Version gate 1. Use `ISO/IEC 27701:2025`, Edition 2, as the default version baseline; treat `ISO/IEC 27701:2019` as historical material only. 2. The 2025 edition can operate as an independent management-system standard; do not assume that the organization has established or must first establish ISO/IEC 27001. 3. When answering about the "latest" or "current" version or differences between 2019 and 2025, recheck official sources instead of...