The Bank of the Philippine Islands (BPI) has become the country’s first universal bank to earn both ISO/IEC 27001:2022 (information security) and ISO/IEC 27701:2019 (data privacy) certifications, underscoring its commitment to protecting customer information amid growing digital transactions.
Granted by BSI Group Philippines, the accreditations cover one of the broadest scopes in local banking—spanning online and mobile banking, remittances, cash management, and contact center operations. Both standards require continuous compliance, regular audits, and ongoing improvements rather than a one-time assessment.
“These reflect our commitment to making security and privacy integral to how we serve customers,” said BPI president and CEO TG Limcaoco. “Applied across all key channels, these ensure your experience stays secure, resilient, and trustworthy.”
For clients, the dual seal means stronger protection of personal and financial data, independently verified controls, and alignment with global and local rules including the Data Privacy Act, GDPR, and BSP regulations. The milestone builds on over 20 years of steady security upgrades, reinforcing BPI’s trusted, globally aligned operations for both retail and corporate customers.
