Onome Amuge
Access Bank has announced its certification under ISO/IEC 27701:2019, the global standard for Privacy Information Management Systems (PIMS). This award affirms that the bank operates a strong framework for managing, processing, and protecting Personally Identifiable Information (PII) across its operations, aligning its practices with international standards for data security and compliance.
The certification’s scope is comprehensive, covering the management and protection of PII related to customers, employees, and third parties across the bank’s entire physical and digital asset base.
According to the bank, this includes all processes and information systems involved in the collection, storage, processing, sharing, and disposal of sensitive information. The certification demonstrates Access Bank’s role as both a PII Controller and a PII Processor, ensuring that it safeguards information at every stage of its lifecycle.
Favour Femi-Oyewole, group chief information security officer and data protection officer at Access Bank, commented that the achievement is a testament to the bank’s proactive approach to information security and data privacy.
“This is a testament to our commitment to safeguarding the trust our customers place in us and our culture of continuous improvement,” she said.
Lanre Bamisebi, executive director of IT and digitisation at Access Holdings, noted that the certification marks a pivotal milestone in the bank’s digital strategy. “Securing this certification underscores the strategic investments we continue to make in digital innovation. It is the result of deliberate cross-functional collaboration and a forward-thinking approach to governance and trust,” he stated.
The certification is not merely a technical achievement but a strategic move that enhances the bank’s brand credibility and competitive edge. In an era where data privacy regulations are becoming stricter and consumer awareness of digital security is rising, achieving this global standard positions Access Bank as a reliable steward of customer information. It reinforces the bank’s commitment to building resilient systems that not only meet current regulatory requirements but also anticipate the evolving expectations of both customers and regulators in the global data protection sector.
