NAIROBI, Kenya- Safaricom PLC has reached a new milestone in data security, achieving the coveted ISO 27701 Privacy Information Management System (PIMS) certification from the British Standards Institute (BSI).
This certification, issued on October 16, 2024, stands as the highest recognition a company can receive in the management of privacy information systems, affirming Safaricom’s role as a trusted data controller and processor for its customers across Kenya.
Achieving the ISO 27701 certification places Safaricom among a select group of organizations worldwide that adhere to the most stringent global privacy and data management standards.
BSI’s comprehensive assessment covered key areas of Safaricom’s operations, including customer support, billing, M-PESA services, and data center operations, each rigorously evaluated for compliance with the latest privacy and security benchmarks.
The ISO 27701 certification serves as a significant validation of Safaricom’s commitment to safeguarding customer data.
The assessment addressed critical components like system controls, personal information protection policies, and dedicated privacy policies.
Key systems examined included the Customer Relationship Management (CRM), IP Contact Centre (IPCC), M-PESA platforms, MySafaricom App, and the M-PESA Business App, demonstrating Safaricom’s dedication to end-to-end data protection across its platforms .
Reflecting on this achievement, Safaricom CEO Peter Ndegwa expressed pride in the company’s cross-functional teams.
“This accomplishment is a testament to our unwavering commitment to privacy and security, reinforcing our mission to provide exceptional experiences for our customers,” Ndegwa remarked.
Safaricom’s ongoing investments in privacy and compliance continue to set a benchmark for data protection standards in Kenya and beyond, ensuring customer trust remains a priority as the company evolves.
With the ISO 27701 certification, Safaricom underscores its dedication to building a robust privacy framework, further strengthening its reputation as a pioneer in privacy and data protection across the region.