Nigeria mandates local storage of payment data by 2027

The Central Bank of Nigeria (CBN) has ordered all financial institutions and payment service providers to store and manage locally generated payment transaction data within Nigeria. The directive, which carries a compliance deadline of January 1, 2027, marks a significant shift toward data sovereignty for the nation's financial sector.

The mandate applies to a broad spectrum of the industry, including traditional banks, fintech startups, and mobile money operators. By requiring that sensitive transaction data remain under Nigerian jurisdiction, the CBN aims to enhance regulatory visibility and strengthen consumer protection. While the move is seen as a necessary step for national security and oversight, it requires a massive migration of data currently hosted on global cloud platforms such as AWS and Azure to local infrastructure.

Regulatory Alignment

This policy is part of a broader effort to tighten Nigeria's data protection framework. It aligns with the Nigeria Data Protection Act of 2023 and the Nigeria Data Protection Commission's (NDPC) General Application and Implementation Directive, which took effect in September 2025. While the NDPC provides a framework that allows for cross-border data transfers under specific safeguards, the CBN is implementing a stricter, localized approach specifically for payment data to ensure the regulator has direct and immediate access to critical financial records.

Infrastructure Concerns

Despite the strategic goals, industry leaders have expressed apprehension regarding the readiness of Nigeria's domestic tech ecosystem. Chibueze Damian, founder and CEO of Paymita, noted that while the objective of improving regulatory oversight is clear, the local data center ecosystem may not yet offer the same scale, redundancy, and cost efficiency found in global cloud environments.

Critics point to the high cost of migration and the operational risks inherent in Nigeria's power supply as primary hurdles. The reliance on local servers means that any instability in the national grid could potentially impact the availability of financial services if local data centers cannot maintain consistent uptime.

Industry Outlook

For some, the deadline provides much-needed clarity. Roosevelt Elias, founder and CEO of Payble, stated that the CBN has signaled its intent for data localization for years, and adding a firm deadline is the correct move to drive implementation.

If successfully executed, the policy could spark a surge of investment in Nigeria's local data center industry. However, if the infrastructure fails to scale rapidly enough to meet the 2027 deadline, the resulting operational costs could stifle innovation among smaller fintech startups. The industry now watches to see if local providers can expand their capacity and reliability to meet the demands of the country's entire financial sector.