Unlike other privacy frameworks that recommend that companies be scored or self-score using a maturity model (e.g., a score from one to four), the ISO 27701 privacy framework (much like its predecessor ISO 29100) does not identify a specific methodology for assessing compliance or maturity.
Does the ISO 27701 privacy framework tell companies how to score themselves?
