The Data Privacy Lawyers Association of Nigeria (DPLAN) has filed a suit at the Federal High Court in Kaduna challenging a recent directive by the Central Bank of Nigeria (CBN) that restricts the amendment of telephone numbers linked to Bank Verification Numbers (BVN) to a single instance.
The legal action follows a circular issued by the apex bank directing financial institutions to allow customers change the phone number associated with their BVN only once, a move the association argues is inconsistent with data protection principles and could have far-reaching implications for bank customers.
In the suit No. , DPLAN contends that apart from violating the provisions of the Nigeria Data Protection Act 2023 the policy is arbitrary and fails to reflect the realities faced by millions of Nigerians who frequently change their phone numbers due to theft, loss, network challenges, or other personal circumstances. The association maintains that such a rigid restriction could prevent individuals from accessing essential financial services tied to their BVN.
According to the group, the CBN’s directive undermines the right of data subjects to rectify personal information, a core principle under data protection frameworks. It further argues that limiting amendments to a single occurrence could expose customers to heightened risks, including financial exclusion and potential fraud.
DPLAN is asking the court to declare the circular unlawful and unconstitutional, and to set aside the one-time amendment restriction. The association is also seeking an order restraining the CBN and financial institutions from enforcing the policy. The case, filed in Kaduna, is expected to test the balance between regulatory controls aimed at safeguarding the banking system and the protection of individual data rights in Nigeria.