Toppan gains ISO privacy certification for MyAnchor data platform

Toppan has received ISO/IEC 27701 privacy management certification for its MyAnchor platform that allows individuals to manage their personal information and control how it is shared with businesses and public sector service providers.
The certification scope covers Toppan’s handling of personal information when designing, developing, managing and operating its personal information management and distribution systems.
The company says MyAnchor separates its core processing system from the Personal Data Store (PDS) that holds users’ personal information. According to Toppan, this design prevents system developers and operators, including Toppan personnel, from viewing the contents of the data stored in the PDS.
For organizations using MyAnchor, the platform provides the infrastructure to store, manage and share personal information without requiring them to build their own systems.
The ISO/IEC 27701 certification provides an independent assessment of how Toppan manages privacy around those operations.
Toppan’s certification is for ISO/IEC 27701:2019, even though ISO published a revised edition of the privacy information management standard in October 2025.
The 2025 edition retains the focus on establishing, implementing, maintaining, and continually improving a PIMS, but is structured as an independent management system standard that can be used on its own.
Toppan acknowledges that the issued certificate is based on the older edition and says it plans to transition to updated versions of the standard during future audit cycles.
The certification does not control what happens to information after a user authorizes its disclosure to another organization through MyAnchor.
Toppan says users can decide which service providers receive their personal information. The ISO/IEC 27701 certification only adds governance around how that information is managed.
BSI Group Japan issued the certification on June 23, 2026.
The company also recently introduced PQC CARD Dual, a contact and contactless smart card for government and healthcare identification that combines post-quantum algorithms with conventional RSA and elliptic-curve cryptography (ECC).
Article Topics
certification | data privacy | data protection | ISO standards | Toppan





Comments