Why banks in Nigeria and Fintech data want to live in Nigeria before 2027

ARTICLE:

When you are operating in a banking system in Nigeria,immediately you send money with your Nigerian bank app this morning, the record of that transaction may not be in Nigeria at all. It might be sitting in a data centre in Europe or the US.

The Central Bank of Nigeria says that has to change, and it has set a hard deadline.

The new rule that started it all

On June 15, 2026, the CBN's Payments System Supervision Department issued circular PSS/DIR/PUB/CIR/001/004. The circular was signed by Director Rakiya O. Yusuf and it is blunt: every organisation licensed to handle payments in Nigeria must ensure that payment transaction data generated in Nigeria is stored and managed in Nigeria.

Deadline for full compliance is January 1, 2027 https://nairametrics.com/2026/06/16/cbn-mandates-banks-fintechs-to-store-payment-data-in-nigeria/.

This is not the first time Nigeria has talked about data localisation. What makes this different is the scope and the date. It is not a suggestion. It is a directive tied to licensing, and it comes with new rules on market dominance and ownership transparency too https://economicconfidential.com/2025/06/cbn-orders-banks-fintechs-to-localise-payment-data-by-2027/.

That is why Slack groups, CTO WhatsApp groups, and tech Twitter are noisy again.

Why the CBN says it matters now

Two things changed.

First, volume. Nigeria's digital payments have exploded. Industry reports cited in recent coverage note that electronic payment transactions crossed N284.99 trillion in Q1 2025, up 17.7% from the previous year. The system is bigger, faster, and more concentrated than ever https://punchng.com/cbn-data-localisation-raises-skills-security-concerns/.

Second, risk perception. The CBN said the growth has created worries about dependence on foreign infrastructure, market concentration, and ownership transparency. If a critical cloud provider abroad has an outage, or if a payment company cannot provide local logs quickly during a fraud investigation, the regulator has limited levers. Local hosting, in the CBN's view, improves supervision, speeds up incident response, and protects financial stability.

The Nigeria Data Protection Commission has also warned about coordinated cyber threats targeting financial systems, which adds political backing to the push.

Who actually has to comply

The circular is wide. It does not just apply to the big banks.

It applies to:

• deposit money banks
• microfinance banks
• mobile money operators
• switching and processing companies
• payment terminal service providers
• payment solution service providers
• super agents and other licensed operators https://www.linkedin.com/pulse/cbns-data-localization-mandate-explained-whats-changing-gabriel/

In practice, that means everyone from a Tier-1 bank to a small fintech offering virtual accounts.

The law firms parsing the document say the definition of payment data is broad: transaction receipts, logs, settlement files, card details, account histories, and personal data linked to payments. If it was generated in Nigeria while moving money, it should be stored and managed here.

Why fintech founders are feeling the pressure more

Ask data centre operators who has already complied and the answer is consistent. Most top-tier banks ensured years ago that the category of data the regulator forbids from living outside Nigeria is already localised, even if they still run other systems on Microsoft Azure or AWS https://nairametrics.com/2026/06/24/why-cbns-data-localization-policy-will-hit-fintechs-harder-than-banks-sath-md/.

Many fintechs did the opposite. They built cloud-native on foreign hyperscalers because it was cheaper to start, easier to scale, and gave instant access to managed databases, fraud AI, and global payment connectors.

Moving now means:

• auditing every data flow to know what counts as in-scope
• renegotiating contracts with foreign cloud vendors
• provisioning racks, power, and connectivity locally
• planning a migration that keeps 99.9% uptime while moving live transaction databases https://radarr.africa/banks-fear-cbn-data-rule-could-disrupt-payments/

For a seed-stage fintech with 10 engineers, that is months of work compressed into a few quarters.

Why data centre landlords are smiling

If fintechs see cost, data centre CEOs see demand.

Ayotunde Coker, CEO of Open Access Data Centres (OADC), told Nairametrics the CBN push could help Nigeria become Africa's data hub, not just for compliance but for export of computing services. He pointed to Nigeria's fibre landing stations, gas for power generation, and growing hyperscale footprint https://nairametrics.com/2026/09/20/cbn-data-localisation-push-could-make-nigeria-africas-data-hub-oadc-ceo/.

He is not alone in betting. In the months before the deadline:

• Kasi Cloud announced a Lekki facility scalable to 100MW
• Digital Parks Africa entered the race with an AI-ready hyperscale build
• Lagos State said about 146MW of new capacity was in the pipeline, aiming for over 250MW by 2030 https://nairametrics.com/2026/09/11/digital-parks-africa-enters-nigerias-data-centre-race-with-lagos-facility/

There is also a naira argument. ALTON Chairman Gbenga Adebayo noted that local hosting lets companies pay in naira rather than dollars, reducing forex exposure at a time when banks have spent heavily on IT. Banks spent a combined N177.91 billion on IT in Q1 2026 alone https://nairametrics.com/2026/06/14/cbns-mandatory-local-hosting-will-cut-nigerian-banks-fintechs-forex-exposure-alton/.

When you frame it that way, localisation sounds less like a penalty and more like industrial policy for Nigeria's cloud economy https://businessamlive.com/data-localisation-opens-new-investment-window-for-nigerias-data-centres/.

The hard questions nobody can dodge

The optimism is real, but so are the gaps.

• Power and Lagos concentration: Almost all Tier-3 capacity is in Lagos. If primary and disaster recovery sites must both be in Nigeria, does that create geographic risk? What about fibre cuts and flooding?
• Skills: Migration needs database admins, network engineers, and security auditors who have done live payment migrations before. Those people are scarce.
• Cost of dual-run: Until January, many companies will pay for both foreign cloud and local racks, a double bill small startups cannot afford https://punchng.com/cbn-data-localisation-raises-skills-security-concerns/.
• What about backups? The circular says data must be stored and managed locally. Does that include encrypted backups and logs that hyperscalers replicate globally by default? Companies are waiting for clearer guidance.

Operators also admit they will need to build faster. As one CEO said in a media briefing, when a regulator says do it by January in six months, you get your head down and work out what you need to do, whether it is lift-and-shift or new builds https://punchng.com/2026/07/24/cbn-data-rules-to-drive-digital-infrastructure-expansion/.

What happens next for users

For everyday users, the change is invisible if it works. Transfers remain instant. The difference is legal and operational: your payment record lives under Nigerian law, retrievable by local regulators without cross-border request.