Access Bank announced that it has been certified under ISO/IEC 27701:2019, the global standard for Privacy Information Management Systems.

This award demonstrates Access Bank plcs consistent commitment to the highest levels of data privacy, security, and compliance.

The certification affirms that Access Bank operates a Privacy Information Management System (PIMS), which fully complies with the rigorous requirements of ISO/IEC 27701:2019. The scope of the certification encompasses the management, processing, and protection of Personally Identifiable Information (PII) related to customers, employees, and third parties across the entire organisation.

This certification covers all physical and digital assets, processes, and information systems engaged in the collection, storage, processing, sharing, and disposal of PII throughout the bank. The Statement of Applicability, version 15.0, dated March 27, 2025, demonstrates Access Bank’s role as both a PII Controller and a PII Processor, ensuring a robust framework for safeguarding sensitive information at every stage of its lifecycle. The certification is referenced under ISMS Certificate, No. IS 583140.

The Group Chief Information Security Officer / Data Protection Officer, Access Bank, Dr. Favour Femi-Oyewole in a statement said, “Achieving the ISO/IEC 27701:2019 certification is a testament to Access Bank’s proactive approach to information security, Data Protection and Privacy, which reflects our commitment to safeguarding the trust our customers place in us, and our culture of continuous improvement. It demonstrates our dedication to adopting global best practices and reinforces our position as a leader in privacyinformation management across the financial services sector.”

Executive Director, IT and Digitisation, Access Holdings, Lanre Bamisebi remarked, “Securing the ISO/IEC 27701:2019 certification marks a pivotal milestone in Access Bank’s journey to embed privacy and data protection at the heart of our digital strategy.

It also underscores the strategic investments we continue to make in digital innovation. This achievement reflects our unwavering commitment to building resilient systems that not only meet global standards but also anticipate the evolving expectations of ourcustomers and regulators. It is the result of deliberate cross-functional collaborationand a forward-thinking approach to governance and trust.

Receiving the ISO/IEC 27701:2019 certification shows Access Bank’s proactive approach to privacy management, its investment in state-of-the-art security infrastructure, and its commitment to building trust with stakeholders and the broader

www.accessbankplc.com

community. Access Bank remains fully committed to upholding the privacy rights of all

individuals and adapting to the evolving global data protection landscape.