Seven Weeks to Bring Nigeria's Payment Data Home — and Only About Half the Industry Is Ready

Picture the first week of January. Your payments partner emails to say that card receipts, transaction logs and customer account details must now live on servers physically inside Nigeria. Your engineers are mid-sprint. Your cloud contract runs through 2028.

That scenario is no longer hypothetical. The Central Bank of Nigeria has said, repeatedly and in public, that 1 January 2027 is the date, and with about seven weeks left, the industry's own numbers suggest a large share of it is not there yet.

What the CBN actually ordered

The rule comes from a circular dated 15 June 2026 that bundles market-structure requirements, data localisation, ultimate beneficial ownership disclosure and systemic oversight measures. Law firm Tope Adebayo LP, writing on Legal 500, reads the data rule as requiring payment and financial transaction data to be processed, stored and managed inside Nigeria. BusinessDay's earlier report framed it as storage and management. That difference matters, and we return to it below.

Directly regulated: banks, microfinance banks, mobile money operators, switching companies and payment service providers. Indirectly: Tope Adebayo LP notes that unlicensed fintechs count as participants facilitating payments, so a licensed partner can pass the duty down through contracts. We could not open the circular PDF itself, so these descriptions rest on the law firm's and the press's reading of it.

No extension, and no soft landing promised

At a Lagos roundtable reported by Arise News on 8 October, the CBN's payment-systems supervision team said the compliance date had not changed. On 28 October, at a regulatory dialogue reported by ThisDay, Dr Rakiya Yusuf of the CBN struck a gentler tone on enforcement, saying sanctions would not be the first thing on the regulator's mind, then added plainly that there would be sanctions for non-compliance. No penalty amounts have been published in any of the coverage we reviewed.

The readiness number depends on who you ask

ThisDay reports that 57 per cent of financial institutions are ready, with NITDA's director general citing the figure. Nairametrics, on 6 November, reports 59 per cent from the same NITDA and CBN survey. The two-point gap is small, but the CBN's own wording is vaguer still: ThisDay quotes Dr Yusuf saying more than half the industry is ready. Either way, roughly four in ten institutions were not ready as October ended.

Bigger banks look better placed. UniCloud Africa's CEO told WeeTracker that most Tier-1 and Tier-2 banks have already localised transaction data. The pain sits with fintechs on long foreign-cloud contracts, and with smaller players such as microfinance banks, which a bank official told Nairametrics may struggle.

The money: two estimates that do not agree

Two industry estimates circulate, and they are not the same claim. BusinessDay cites industry estimates of more than $1.1 billion a year spent on public cloud in Nigeria, with up to $850 million of it potentially retainable if localised. WeeTracker, citing Punch, says Nigerian enterprises spend as much as $850 million a year on foreign cloud. One treats $850 million as the prize; the other treats it as the total. Neither traces to a primary dataset, so treat both as directional.

Is there enough local capacity?

This is where the sources diverge most.

• TechCabal counts about 26 facilities, 18 of them commercial, with 50 to 56 MW of live commercial capacity and about 124 MW if built-but-unequipped expansion is included.
• WeeTracker, citing TechCabal, gives 65 to 86 MW installed.
• Rack Centre's CEO, Lars Johannisson, told Nairametrics that some assume about 60 MW but the real IT load may be about half that.
• BusinessDay says more than 21 facilities; the others say about 26.

Projections vary just as widely, from roughly 220 MW by 2032 (Rack Centre) to more than 400 MW within five years (WeeTracker, unsourced). Johannisson also estimates only about 70 per cent of announced investment, over $1 billion, will materialise, and often late.

Meanwhile, Kasi Cloud's Johnson Agogbua argued to TechCabal that physical space is not the real shortage; locally available cloud platforms are. Operators such as OADC, Rack Centre and Galaxy Backbone each claim strong uptime, but those are self-reported figures.

Storage is not security

Lamido Yuguda, the CBN's deputy governor for financial system stability, warned at the same dialogue that localisation alone does not guarantee security. Moving data onshore does not remove cyber or operational risk, and sceptics such as analyst Moyo Oluwatuyi have asked whether local facilities can stay reliable given Nigeria's power supply. Rack Centre runs off-grid on a 13.5 MW gas system precisely because of that concern.

What Nigerian businesses should do this month

• Ask every payments, banking and fintech partner in writing whether they will be compliant on 1 January, and what changes for you.
• Map where your transaction data physically sits, including logs, backups and analytics copies.
• Check whether your contracts allow migration, and what exit fees apply.
• Clarify with your providers whether processing, not just storage, must be onshore; Digital Realty Nigeria's CEO has argued it should be.
• Plan phased moves with local disaster recovery across more than one data centre, as Legal 500 advises.

The opportunity inside the squeeze

Dr Yusuf framed the rule as sovereignty and visibility. For business owners, it is also a procurement moment: local data-centre and cloud providers now have regulatory tailwind, and buyers who move early will have more negotiating room than those who rush in December.

So here is the question for your team: if your payments partner told you tomorrow that your data had to be onshore in seven weeks, would you know where it lives today?

Sources

• ThisDay — CBN: 57% of Financial Institutions Ready for Data Localisation Deadline (opens in a new tab) (29 Oct 2026, primary source)
• Nairametrics — CBN's January 2027 data localisation deadline puts banks, fintechs under pressure (opens in a new tab) (6 Nov 2026)
• Arise News — CBN Holds Firm On January 2027 Data Deadline, Orders Banks To Localise Payment Data (opens in a new tab) (8 Oct 2026)
• BusinessDay — Over 90% of Nigerian banks, fintechs face foreign cloud exit as CBN forces data home by 2027 (opens in a new tab) (16 Jun 2026)
• Legal 500 (Tope Adebayo LP) — CBN's Data Localisation Mandate: What Nigerian Fintechs Need To Know (opens in a new tab) (8 Jul 2026)
• WeeTracker — Nigeria Gives Banks & Fintechs Deadline To Bring Payment Data Home (opens in a new tab) (7 Aug 2026)
• TechCabal — Nigeria's data centres face major test under CBN's local hosting mandate (opens in a new tab)
• Nairametrics — Why global investors are betting big on Nigeria's data centre market - Rack Centre CEO (opens in a new tab) (7 Nov 2026)
• Nairametrics — CBN data localisation push could make Nigeria Africa's data hub - OADC CEO (opens in a new tab) (22 Sep 2026)