ISO/IEC 27018 is an international standard that defines security and privacy controls specific to cloud service providers acting as PII processors. It extends ISO/IEC 27001 and 27002 with additional requirements for data protection in public cloud environments, covering transparency, consent, usage limitation, secure deletion, and notification of authority access.