For its consistent commitment to the highest levels of data privacy, security, and compliance, Access Bank Plc has been awarded the ISO/IEC 27701:2019 Certification for Privacy Information Management Systems.
The scope of the certification encompasses the management, processing, and protection of Personally Identifiable Information (PII) related to customers, employees, and third parties across the entire organisation.
It covers all physical and digital assets, processes, and information systems engaged in the collection, storage, processing, sharing, and disposal of PII throughout the bank.
The Statement of Applicability, version 15.0, dated March 27, 2025, demonstrates Access Bank’s role as both a PII Controller and a PII Processor, ensuring a robust framework for safeguarding sensitive information at every stage of its lifecycle.
The certification is referenced under ISMS Certificate, No. IS 583140 and affirms that the lender operates a Privacy Information Management System (PIMS), which fully complies with the rigorous requirements of ISO/IEC 27701:2019.
It reflects the bank’s proactive approach to privacy management, its investment in state-of-the-art security infrastructure, and its commitment to building trust with stakeholders and the broader community.
“Achieving the ISO/IEC 27701:2019 certification is a testament to Access Bank’s proactive approach to information security, Data Protection and Privacy, which reflects our commitment to safeguarding the trust our customers place in us, and our culture of continuous improvement.
“It demonstrates our dedication to adopting global best practices and reinforces our position as a leader in privacy information management across the financial services sector.” The Chief Information Security Officer/Data Protection Officer of Access Bank, Favour Femi-Oyewole, said.
Also, the Executive Director for IT and Digitisation at Access Holdings Plc, Lanre Bamisebi, said, “Securing the ISO/IEC 27701:2019 certification marks a pivotal milestone in Access Bank’s journey to embed privacy and data protection at the heart of our digital strategy. It also underscores the strategic investments we continue to make in digital innovation.
“This achievement reflects our unwavering commitment to building resilient systems that not only meet global standards but also anticipate the evolving expectations of our customers and regulators. It is the result of deliberate cross-functional collaboration and a forward-thinking approach to governance and trust.”