Nigeria's central bank gives fintechs until January to bring their data home
The CBN has ordered every bank, fintech, and payment operator in Nigeria to stop storing transaction data on foreign servers by 1 January 2027 -- a deadline that could force one of the country's biggest technology migrations.
Every naira that moves through a Nigerian bank app, a POS terminal, or a mobile wallet leaves a data trail. Until this year, most of that trail crossed an ocean, sitting on servers in Europe or the United States, managed by Amazon, Microsoft, or Google. A circular from the Central Bank of Nigeria (CBN) says that has to stop.
The directive, signed 15 June 2026 by Rakiya O. Yusuf, Director of the CBN's Payments System Supervision Department, orders deposit money banks, microfinance banks, mobile money operators, switching and processing companies, payment terminal service providers, payment solution service providers, super agents, and other licensed payment operators to process and store all payment transaction data generated in Nigeria on servers physically located inside the country. The compliance deadline is 1 January 2027 -- roughly six months from the circular's date. Firms that miss it risk supervisory sanctions, including fines and licence suspension. The same circular also requires payment operators to disclose their ultimate beneficial owners, part of a wider push for oversight in a sector the CBN says has scaled faster than its supervisory visibility.
The scale of what has to move is enormous. Nigeria's electronic transaction value rose 80% to roughly ₦1.07 quadrillion (about $702 billion) in 2024, from ₦600 trillion ($393.6 billion) the year before, across 11.2 billion transactions, according to the Nigeria Inter-Bank Settlement System. Industry estimates cited by Businessday put the share of regulated Nigerian financial businesses currently hosting data on foreign cloud platforms at more than 90%. Nigeria's ten largest banks alone spent ₦177.91 billion (about $116 million) on IT in the first quarter of 2026, up 30.8% year-on-year.
Why the deadline is being taken seriously this time
Nigerian fintechs have heard localisation talk before without much following through. What is different now, according to legal analysis published by Tope Adebayo LP, is that the CBN circular is specific about scope (payment data, not just "sensitive" data), specific about the clock (a fixed date, not an open-ended aspiration), and paired with beneficial-ownership disclosure -- a signal the regulator wants to know not just where the data sits, but who ultimately controls the companies handling it. For an industry that has built a decade of products on the assumption that AWS, Azure, or Google Cloud would always be available and cheap, that combination changes the calculus quickly.
The physical capacity to absorb this exists, if barely. Nigeria has roughly 26 data-centre facilities, 18 of them commercial, concentrated in Lagos with growing footprints in Abuja, Kano, Enugu, and Port Harcourt. Live computing capacity sits at 50-56 megawatts, with about 124 megawatts installed once unequipped expansions are counted -- making Nigeria Africa's second-largest data-centre market after South Africa, around 15% of the continent's installed capacity, and Africa Data Centres and local operators are targeting 210-300 megawatts by 2030.
"We've spent years building reliable, world-class data centres that allow banks and other businesses to host their systems in Nigeria," Ayotunde Coker, CEO of Open Access Data Centres, told TechCabal. Lars Christer Johannisson, chief executive of Rack Centre, which runs its own gas-fired power system independent of Nigeria's national grid, said his facility has held 100% uptime since opening 13 years ago.
The bottleneck isn't the buildings
The harder problem is not square footage or diesel generators -- it's the software layer above them. "Physical data centre capacity is not the problem," Johnson Agogbua, co-founder of Kasi Cloud, which is building a 100-megawatt hyperscale campus in Lekki, told TechCabal. "The real question is whether we have enough cloud computing and storage platforms that can support this migration at scale." Ope Adeoye, CEO of embedded-finance platform OnePipe, argued the more realistic path is convincing AWS, Azure, and Google Cloud to deploy local mirrors of their existing services in Nigeria, rather than forcing thousands of fintechs to rebuild on unfamiliar local platforms from scratch -- a migration that also demands app redesign, performance testing, and continuous uptime during the switch, against a persistent backdrop of patchy power and a shortage of experienced cloud engineers.
Whichever path wins, the CBN has effectively created guaranteed local demand overnight for an industry that, until this year, had to build a business case for it. Whether Nigeria's cloud providers can grow fast enough to meet a deadline the regulator has now made non-negotiable is the real story to watch over the next six months -- not whether the mandate itself survives contact with an industry that has resisted localisation talk before.
