Any business or service provider who handles, manages, or transmits client data should comply with ISO 27001. While it is not a compulsion, operating without a robust security framework is increasingly getting harder.