Nigeria’s CBN data localisation policy is entering a critical phase, with banks and fintechs warning that the Central Bank of Nigeria’s (CBN) January 1, 2027 deadline could pressure financial institutions to migrate large volumes of payment data before the country’s infrastructure and regulatory framework are fully prepared.
The concern, raised by industry executives at the inaugural GrowthX by Techeconomy and TiLAwards in Lagos, reflects a tension that has followed Nigeria’s digital transformation for years: the country is expanding its digital economy faster than the infrastructure, trust architecture and regulatory coordination needed to support it.
The CBN’s data-localisation directive, issued in June 2026, requires payment-system operators to ensure that relevant payment data is hosted within Nigeria by January 1, 2027.
At GrowthX, however, technology executives argued that the six-month implementation window leaves limited room for financial institutions to redesign infrastructure, migrate workloads, test systems and manage operational risks without disrupting services.
Blessing Ehize, chief technology officer at FCMB, said uncertainty over the precise scope of the directive had become a major obstacle.
According to Ehize, banks need clearer guidance on which categories of payment data must be hosted domestically and which workloads can continue to operate through hybrid-cloud arrangements.
“To bring payment data back on-premise, for the last three months, we’ve not been able to engage effectively with the Central Bank of Nigeria as the Committee of Bank CIOs to get clarity on these issues.”
He said the industry had the technical capacity to execute the transition but needed a defined roadmap and milestones rather than a rushed migration.
“We really have the capacity to do this as a country, but we just need to plan it and not rush the Nigerian way,” Ehize said.
CBN Data Localisation Deadline Puts Infrastructure Under Pressure
The debate over the CBN data localisation deadline comes at a time when Nigeria’s financial system has become increasingly dependent on digital infrastructure.
Instant payments, mobile banking, fintech platforms and digital wallets have moved from being supplementary channels to becoming central components of everyday financial activity.
At the GrowthX event, cybersecurity strategist David Adeoye Abodunrin said digital payments had crossed N1 quadrillion in a year, with more than 11.2 billion instant transfers processed through the Nigeria Inter-Bank Settlement System’s (NIBSS) NIP platform.
That growth has simultaneously increased the importance of keeping the infrastructure supporting those transactions reliable, secure and resilient.
Abodunrin argued that Nigeria’s challenge is therefore not simply about technology.
“Nigeria does not have a payment problem. It has a trust-architecture problem.”
His argument captures the larger issue confronting the localisation policy.
Moving data into Nigeria does not automatically make the financial system more secure. Domestic hosting still requires reliable electricity, data centres, telecommunications infrastructure, cybersecurity capabilities, disaster-recovery systems and skilled personnel.
The timing of the CBN directive is particularly significant because Nigeria’s financial technology ecosystem has spent the past decade building around cloud computing and distributed digital infrastructure.
Banks and fintechs have increasingly adopted cloud services to support scalability, data processing and digital products.
Reversing or restructuring parts of that architecture is therefore not equivalent to simply moving files from one server to another.
It can involve reviewing applications, redesigning workloads, procuring domestic capacity, establishing redundancy, testing disaster-recovery arrangements and ensuring that migration does not create new operational vulnerabilities.
Hakeem Adeniji-Adele, deputy managing director at eTranzact, said the volume of data involved makes the six-month window particularly challenging.
“I believe, is quite short, simply because of the amount of load that needs to be moved,” he said.
Adeniji-Adele proposed a phased implementation, with compute and storage migrated progressively rather than requiring institutions to move their entire infrastructure simultaneously.
The debate also connects directly with a broader transformation taking place underneath Nigeria’s digital economy.
Dr Ayotunde Coker, chief executive officer of Open Access Data Centres (OADC), said information technology had become fundamental to virtually every major part of the economy, from banking and oil and gas to government services.
“You can’t move money without information technology,” Coker said.
His point illustrates why the localisation debate extends beyond compliance.
A disruption to a data centre is no longer simply an IT problem. If the infrastructure supporting a bank’s digital channels goes offline, customers may be unable to transfer funds, businesses may struggle to make payments and other parts of the financial system can be affected.
Coker said Nigeria’s digital infrastructure had nevertheless developed substantially, with growth in data centres, connectivity and subsea cable capacity providing a stronger foundation for technologies including cloud computing and artificial intelligence.
That progress is important for localisation because the availability of domestic infrastructure determines how much of the workload can realistically be brought back into the country.
Over the past five years, Nigeria has witnessed rapid expansion in fintech adoption, digital payments, telecommunications infrastructure and data-centre investment.
The arrival and expansion of subsea cables have increased international connectivity capacity, while domestic data-centre operators have expanded capacity to serve banks, telecommunications companies, technology firms and public-sector organisations.
At the same time, the growth of fintech has increased the volume and variety of data generated by digital financial services.
The result is a digital economy that is considerably larger and more complex than it was five years ago.
The government wants strategic financial data to remain within Nigerian jurisdiction, while financial institutions need enough flexibility to maintain the scalability and resilience that helped digital banking expand rapidly.
The infrastructure debate is closely tied to another problem: trust.
Abodunrin said digital payment fraud losses fell 51 per cent to N25.85 billion in 2025 from N52.26 billion in 2024, citing NIBSS data.
Despite the decline, he said social engineering remained the leading fraud technique, while insider involvement presented a major risk.
This suggests that localisation alone cannot resolve payment fraud.
A payment ecosystem can have domestic servers and still be vulnerable if authentication, identity verification, cybersecurity, employee controls and consumer protection remain weak.
Abodunrin proposed a five-layer “Trust-by-Design Stack” covering secure software, resilient payment rails, behavioural safeguards, sovereign data practices and shared accountability among banks, fintechs and telecommunications operators.
His position aligns with the direction of the CBN’s Payments System Vision 2028, which places trust at the centre of the future payment system.
The CBN has set a target of reducing fraud losses to below 0.001 per cent of transactions.
The localisation debate also intersects with Nigeria’s continuing effort to strengthen digital identity.
Akinsanya said digital growth would require more than servers and cables, pointing instead to the combination of trust, talent and infrastructure carrying a Nigerian identity.
The president of the Nigeria Internet Registration Association (NiRA) cited the organisation’s .ng Academy and implementation of Domain Name System Security Extensions (DNSSEC) as examples of efforts to build local digital capacity and improve trust within Nigeria’s internet infrastructure.
The wider lesson is that localisation is not simply a geographical question.
It is also about whether Nigeria possesses the institutions, skills and security systems necessary to manage critical digital infrastructure domestically.
For banks and fintechs, the immediate issue remains the January 2027 deadline.
Ehize’s comments point to a regulatory coordination gap, while Adeniji-Adele’s position suggests that even where there is engagement, the scale of migration requires more time.
The industry is therefore asking for a clearer implementation framework and, in some cases, an extension or phased transition.
That would allow institutions to distinguish between data that must be physically hosted within Nigeria, workloads that can operate through hybrid arrangements and systems that require additional domestic capacity before migration.
The debate is ultimately larger than a six-month compliance window.
Nigeria is attempting to determine who controls the infrastructure behind its increasingly digital financial economy at precisely the moment when cloud computing, artificial intelligence, fintech and instant payments are making that infrastructure more important than ever.
The success of the policy may therefore depend less on how quickly financial institutions can move servers and more on whether regulators and industry can build a workable transition around capacity, security, resilience and trust.
As Peter Oluka, founder and editor-in-chief of Techeconomy, said at GrowthX, the central question is no longer simply how much technology Nigeria can adopt, but how technological progress can be converted into sustainable economic growth.
For the financial sector, the January 1 deadline is becoming an early test of that ambition.