Every bank transfer, card payment and digital wallet transaction generates information that financial institutions must process, store and protect. From January 1, 2027, the Central Bank of Nigeria (CBN) wants payment transaction data generated within the country to be stored and managed locally, setting the stage for a major technology transition across Nigeria’s financial services industry.

The directive, contained in a circular issued on June 15, 2026, applies to banks, mobile money operators, payment service providers, switching and processing companies and other regulated participants in the payments ecosystem. It forms part of a broader regulatory effort to strengthen oversight, protect critical financial information and increase Nigeria’s control over the digital infrastructure supporting its financial system.

However, as the deadline approaches, implementation readiness is emerging as a major concern.

A survey by the National Information Technology Development Agency (NITDA), presented at a joint regulatory dialogue with the CBN in October, found that only 26 of the 44 financial institutions that responded to the readiness question had completed the necessary work or expected to do so before the deadline. This represents 59 per cent of respondents.

Fifteen institutions said they were unlikely or very unlikely to meet the deadline, while three could not assess the readiness. More significantly, 22 of the 44 institutions had yet to begin implementation.

The gaps extend beyond identifying the information that must be moved. The survey found that while 70 per cent of respondents had identified the relevant data and systems, only 25 per cent had secured executive approval and a budget. Just 23 per cent had contracted local providers, while 18 per cent had started migration or remediation activities.

For financial institutions, the transition could involve reviewing existing cloud contracts, assessing where transaction records and backups are held, adapting technology systems and establishing new local hosting arrangements. These requirements could translate into additional infrastructure, compliance and technical costs, particularly for smaller fintech operators with fewer resources.

The implications also extend to international cloud service providers, which have become important infrastructure partners for financial technology companies. Institutions will need to assess how their existing arrangements can accommodate the new requirements, rather than assume that moving a database to a Nigerian server automatically resolves every compliance issue.

Yet the policy could create new opportunities for Nigeria’s domestic technology industry. NITDA Director-General, Kashifu Inuwa, said Nigerian companies spend more than $850 million annually on cloud services, arguing that developing local capacity could retain more economic value within the country and create jobs. The agency also reported that 79 per cent of surveyed digital infrastructure providers were ready to accommodate additional workloads from the financial sector.

This suggests that the challenge may not be limited to the availability of local infrastructure. Contract negotiations, funding, regulatory clarity and the technical process of migration are equally important.

The CBN has also cautioned that data localisation alone does not guarantee security. Financial institutions must maintain strong cybersecurity, business continuity, disaster recovery and risk-management arrangements. At an October industry roundtable, the regulator reiterated that the January 1 deadline remained unchanged and stressed that compliance must cover transaction logs, audit trails, metadata and supporting systems, not merely the physical location of databases.

For consumers, the concern is straightforward: the transition must not compromise the speed, reliability or security of digital payments. Any disruption to critical payment infrastructure could affect businesses and individuals who increasingly depend on electronic transactions.

Nigeria’s data localisation policy therefore presents both an infrastructure opportunity and an implementation test. Its success will depend on whether financial institutions can meet the regulatory requirements while maintaining reliable services, and whether local technology providers can deliver the resilience and security expected of critical financial infrastructure.

The objective is greater control over Nigeria’s digital financial ecosystem. The real test will be achieving that control without making digital finance more expensive, less accessible or less reliable.

ALSO WATCH: MARKETING EDGE ONTV