The Data Privacy Lawyers Association of Nigeria (DPLAN) has filed a suit at the Federal High Court in Kaduna challenging a recent directive by the Central Bank of Nigeria (CBN) that restricts the amendment of telephone numbers linked to Bank Verification Numbers (BVN) to a single instance.

The suit follows a circular issued by the apex bank directing financial institutions to allow customers change the phone number associated with their BVN only once, a move the association argued is inconsistent with data protection principles and could have far reaching implications for bank customers.

In the suit, DPLAN contended that apart from violating the provisions of the Nigeria Data Protection Act 2023, the policy is arbitrary and fails to reflect the realities faced by millions of Nigerians who frequently change their phone numbers due to theft, loss, network challenges, or other personal circumstances.

The association maintains that such a rigid restriction could prevent individuals from accessing essential financial services tied to their BVN. According to the group, the CBN’s directive undermines the right of data subjects to rectify personal information, a core principle under data protection frameworks.

It further argued that limiting amendments to a single occurrence could expose customers to heightened risks, including financial exclusion and potential fraud. DPLAN is asking the court to declare the circular unlawful and unconstitutional, and to set aside the one-time amendment restriction. The association is also seeking an order restraining the CBN and financial institutions from enforcing the policy