This document provides guidelines on the control objectives, controls, and guidelines that are generally accepted for safeguarding Personally Identifiable Information (PII) in the public cloud computing environment, which align with the privacy principles outlined in ISO/IEC 29100. These guidelines are derived from ISO/IEC 27002 and take into account the regulatory requirements that are necessary to protect PII within the information security risk environment of public cloud service providers. This document is applicable to organizations of any size or type, including government entities, private and public companies, and non-profit organizations that process PII as cloud computing providers for other organizations.