Access Bank Plc has been awarded the ISO/IEC 27701:2019 certification, the international standard for Privacy Information Management Systems (PIMS), underscoring its leadership in data protection, information security, and regulatory compliance within Africa’s financial services industry.
The certification, recognised globally as the benchmark for privacy information management, confirms that Access Bank has developed a structured framework for safeguarding Personally Identifiable Information (PII) across its operations. This includes the management, processing, storage, sharing, and disposal of sensitive customer, employee, and third-party data.
With the award, Access Bank joins a small circle of global banks that have demonstrated compliance with the rigorous standards of ISO/IEC 27701:2019. The certification is referenced under ISMS Certificate No. IS 583140 and is supported by the bank’s Statement of Applicability, version 15.0 dated March 27, 2025, which recognises its dual role as both a PII Controller and Processor.
Announcing the milestone, Dr. Favour Femi-Oyewole, Group Chief Information Security Officer and Data Protection Officer at Access Bank, said the certification reflects the institution’s proactive approach to information security and privacy. “Achieving the ISO/IEC 27701:2019 certification is a testament to our culture of continuous improvement and our commitment to safeguarding the trust our customers place in us,” she stated. “It demonstrates our alignment with global best practices and our leadership in privacy information management.”
The certification covers all of Access Bank’s physical and digital assets, ensuring comprehensive protection of PII throughout the data lifecycle. This includes not only IT systems but also business processes, internal controls, and governance frameworks that underpin the bank’s operations.
Lanre Bamisebi, Executive Director of IT and Digitisation at Access Holdings, described the achievement as a pivotal milestone in the bank’s digital transformation agenda. “Embedding privacy and data protection into our digital strategy is no longer optional; it is fundamental,” he noted. “This recognition underscores the strategic investments we have made in building resilient systems that meet international standards while anticipating evolving customer and regulatory expectations.”
He added that the certification was the result of cross-functional collaboration across the organisation, reflecting a forward-thinking approach to governance and risk management. “We view this not just as a compliance requirement but as a strategic enabler for innovation and customer trust,” he said.
Industry analysts note that as Nigerian banks continue to expand their digital platforms, issues of cybersecurity and data privacy have become central to customer trust and regulatory oversight. With increasing global scrutiny on how financial institutions handle sensitive data, Access Bank’s certification positions it strongly in both domestic and international markets.
The bank has consistently invested in digital innovation, with recent initiatives spanning mobile banking enhancements, artificial intelligence-driven customer service, and advanced fraud detection systems. The ISO/IEC 27701:2019 certification provides an additional layer of assurance to regulators, customers, and partners that privacy management is embedded within its operations.
Beyond technology, the certification highlights Access Bank’s governance structure and culture of accountability in managing information security risks. By operating as both a PII Controller and Processor, the bank ensures that data is managed responsibly, whether handled internally or through third-party service providers.
Access Bank stressed that the recognition is not an end in itself but part of a broader strategy to remain ahead of regulatory and technological shifts. “Privacy management is dynamic,” Dr. Femi-Oyewole noted. “As data protection laws evolve globally, we remain committed to adapting and ensuring that customer trust remains at the centre of our strategy.”
The bank’s achievement also reflects the broader trend within Africa’s banking sector, where institutions are increasingly seeking international certifications to attract global partners and assure stakeholders of their compliance with best practices.
Founded in 1989 and now one of Africa’s largest banks by assets, Access Bank has steadily built a reputation for innovation and resilience. This latest certification adds to its growing list of global recognitions and is expected to enhance its competitive positioning, especially as it expands across multiple markets.
The ISO/IEC 27701:2019 certification reinforces Access Bank’s long-term strategy of embedding trust and transparency in its digital operations. It signals to customers, regulators, and investors alike that the institution is prepared to meet the rising demands of privacy and information security in a rapidly evolving financial landscape.
