Newly obtains ISO 27701; renews ISO 27001

[Provided by Lotte Hotels & Resorts]
[Provided by Lotte Hotels & Resorts]

Lotte Hotels & Resorts announced Friday that it has secured international certifications in both information security management and personal data protection.

The company newly obtained ISO 27701, the international personal data protection standard, covering its official website, and passed a renewal audit for ISO 27001, the information security management standard it first received in 2024. The certifications demonstrate that its information security framework and the full scope of its personal data management practices meet global standards, the company said.

ISO 27001, established by the International Organization for Standardization (ISO), is the international standard for information security management systems. It evaluates an organization's overall security capabilities, including information security policy and incident response. ISO 27701 builds on ISO 27001 by adding personal data protection requirements, providing comprehensive verification of an organization's data management practices.

Lotte Hotels & Resorts first obtained Information Security Management System (ISMS) certification in 2014, becoming the first in its industry to do so, and has consistently upgraded its related systems since. The company said it has focused particularly on proactive risk management and strengthening customer data protection as its digital customer touchpoints have grown — including the expansion of its Lotte Hotel Rewards membership program and the renewal of its official online store, Lotte Hotel e-SHOP.

Going forward, the company plans to expand the scope of its global security certifications in line with digital transformation and the spread of cloud- and AI-based services. It also intends to continuously strengthen its information security management framework to support the stable operation of domestic and overseas management contract projects being expanded under its asset-light strategy.

"As digital touchpoints with customers grow, information security and personal data protection are core elements underpinning trust in our services," a Lotte Hotels & Resorts official said. "We will continue building a service environment where customers can use our offerings with confidence."


spa@heraldcorp.com