Union Bank secures global payment data security certification

Union Bank of Nigeria has achieved certification under the Payment Card Industry Data Security Standard version 4.0.1, a worldwide benchmark for safeguarding payment card account information. The certification became effective on August 11, 2026, as confirmed by a statement released on Thursday. PCI DSS establishes both technical and operational prerequisites for maintaining secure environments where payment card account data is stored, processed, or transmitted.

The evaluation encompassed Union Bank's network infrastructure, card issuance, ATM and Point of Sale (POS) transaction processing, and reconciliation, settlement, chargeback, dispute resolution, and retail banking operations. The bank achieved certification in the Service Provider category following a year-long assessment, which included quarterly reviews and the involvement of departmental, business, and functional heads from the bank. This partnership extended to Digital Encode, a security firm.

CyberCube, an accredited Qualified Security Assessor, conducted the final independent audit. Speaking on the accomplishment, Union Bank's Managing Director and Chief Executive Officer, Yetunde Oni, emphasized, "The safety of our customers' information is at the core of everything we do at Union Bank. This certification confirms that our payment systems and procedures adhere to a stringent global standard, and it reflects the dedication of colleagues across the Bank who are committed to safeguarding customer data daily."

The renewal of the certification guarantees that Union Bank will maintain continuous PCI DSS certification, in accordance with the Central Bank of Nigeria's mandate that banks uphold compliance without any lapses. Jide, a seasoned journalist with over a dozen years of experience, focuses on reporting business-related news. All rights reserved; this material, and other digital content on this site, cannot be reproduced, published, broadcast, rewritten, or redistributed in any form without prior written authorization from PUNCH.