Access Bank Awarded ISO/IEC 27701:2019 Certification for Privacy Information Management
admin
2 min read
Access Bank is pleased to announce that it has been certified under ISO/IEC 27701:2019, the global standard for Privacy Information Management Systems. This certification demonstrates Access Bank’s consistent commitment to the highest levels of data privacy, security, and compliance.
The certification affirms that Access Bank operates a Privacy Information Management System (PIMS) fully compliant with the rigorous requirements of ISO/IEC 27701:2019. The scope of the certification includes the management, processing, and protection of Personally Identifiable Information (PII) related to customers, employees, and third parties across the organisation.
It covers all physical and digital assets, processes, and information systems involved in the collection, storage, processing, sharing, and disposal of PII throughout the Bank. The Statement of Applicability, Version 15.0, dated March 27, 2025, confirms Access Bank’s roles as both a PII Controller and PII Processor—ensuring a robust framework for safeguarding sensitive information throughout its lifecycle. The certification is referenced under ISMS Certificate No. IS 583140.
Dr. Favour Femi-Oyewole, Group Chief Information Security Officer / Data Protection Officer at Access Bank, commented:
“Achieving the ISO/IEC 27701:2019 certification is a testament to Access Bank’s proactive approach to Information Security, Data Protection, and Privacy. It reflects our commitment to safeguarding the trust our customers place in us and our culture of continuous improvement. This achievement demonstrates our dedication to global best practices and reinforces our position as a leader in privacy information management within the financial services sector.”
Lanre Bamisebi, Executive Director, IT and Digitisation at Access Holdings, remarked:
“Securing the ISO/IEC 27701:2019 certification marks a pivotal milestone in Access Bank’s journey to embed privacy and data protection at the core of our digital strategy. It also underscores the strategic investments we continue to make in digital innovation. This achievement reflects our unwavering commitment to building resilient systems that not only meet global standards but also anticipate the evolving expectations of our customers and regulators. It is the result of deliberate cross-functional collaboration and a forward-thinking approach to governance and trust.”
Receiving the ISO/IEC 27701:2019 certification highlights Access Bank’s proactive approach to privacy management, investment in cutting-edge security infrastructure, and commitment to building trust with stakeholders and the broader community. Access Bank remains fully dedicated to upholding the privacy rights of all individuals and adapting to the evolving global data protection landscape.
