ISO 27018 is the code of practice for the protection of personally identifiable information (PII) in public clouds. We're going to explore what it means for both providers and customers. ISO/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.