The Central Bank of Nigeria has introduced a data localization requirement that is set to reshape the country's technology and financial services landscape. Under the rule, beginning on the 1st of January 2027, all payment transaction data generated within Nigeria must be stored and managed locally.
According to the requirement, the move marks a significant shift in the nation's approach to data governance and digital sovereignty. It signals a push to keep payment data that is generated in the country within Nigeria's own borders, rather than having it held or managed abroad.
Supporters of the policy say the move could strengthen cybersecurity in the country. They also argue that keeping the data locally would improve regulatory oversight of the payment system, giving authorities better visibility over how data is handled.
Beyond regulation, proponents say the requirement could unlock fresh investment in data centers and cloud infrastructure within Nigeria. The expectation is that demand for local storage capacity would encourage the build-out of facilities to handle the data.
At the same time, there are concerns that the new rule could push up compliance costs for the businesses affected. Companies that currently store data abroad would need to adjust their systems to meet the localization requirement before the deadline.
Within the framework that the CBN is putting in place, fintechs operating with tier-three banks or the new-generation banks are expected to go through the data migration process. That migration is supposed to be completed by January, in line with the start date of the rule.
The requirement adds to existing rules from the Central Bank of Nigeria around payments and fintech operations in the country. As the deadline approaches, affected banks and financial technology firms face the task of aligning their data storage arrangements with the new localization standard.