Data Localisation: How CBN’s New Directive Could Reshape Nigeria’s Digital Infrastructure

 For years, Nigerian financial institutions have relied heavily on digital infrastructure located beyond the country’s borders to power some of their most critical operations. Now, a new directive from the Central Bank of Nigeria (CBN) is set to change that equation.

 Beginning January 1, 2027, financial institutions are expected to host their data locally in Nigeria. While the directive is being viewed primarily through the lens of regulatory compliance and data security, industry stakeholders say its implications could extend much further — potentially reshaping Nigeria’s cloud-computing market and attracting new investment into the country’s digital infrastructure.

 For Ayotunde Coker, Chief Executive Officer of Open Access Data Centres (OADC), the policy represents an opportunity rather than simply an obligation.

 Coker believes that enforcing local data hosting could send a clear message to international cloud service providers that the Nigerian market can no longer be served predominantly from infrastructure located overseas.

 “If foreign cloud providers want to retain Nigerian customers,” the logic behind his argument suggests, “they will increasingly need to establish infrastructure within the country or work with credible local providers.”

 That shift, according to Coker, could bring fresh foreign direct investment into Nigeria as global technology companies respond to the changing regulatory environment.

From compliance to investment….

 The debate over data localisation has traditionally centred on privacy, cybersecurity and national sovereignty. But the CBN directive introduces another dimension: infrastructure investment.

 Nigeria’s financial institutions increasingly depend on cloud computing for banking applications, customer information, transaction processing and other critical services. Yet, according to Coker, a significant portion of this infrastructure is hosted outside the country.

 He noted that even where Nigerian businesses use local cloud providers, some of the underlying infrastructure may ultimately reside on platforms operated by global technology companies such as Amazon Web Services, Microsoft, Google and Oracle in jurisdictions including the United States and the United Kingdom.

 The consequence is a complex digital ecosystem in which data belonging to Nigerian customers can be processed or stored on infrastructure located thousands of kilometres away.

 For Coker, this raises questions that go beyond convenience and technology costs.

 He argues that keeping sensitive financial information outside Nigeria has implications for national sovereignty and security, particularly as the country becomes increasingly dependent on digital systems.

The sovereignty question…

 The push for data localisation is also linked to Nigeria’s broader regulatory effort to strengthen control over personal and sensitive information.

 Coker pointed to the Nigerian Data Protection Act as part of the legal framework underpinning the country’s approach to data governance. From this perspective, localisation is not merely about where servers are physically located; it is also about establishing greater control over the infrastructure supporting the country’s digital economy.

 For banks and other financial institutions, however, the transition will require careful planning.

 Institutions that have already built their technology architecture around overseas cloud infrastructure may have to assess how much of their data and applications need to be moved, which infrastructure should remain where it is, and what operational and security risks could arise during the transition.

 Coker therefore urged institutions currently hosting data outside Nigeria to begin preparing for the directive rather than waiting until the deadline approaches.

 He also advised them to identify the risks associated with compliance and seek expert guidance where necessary.

A potential opening for Nigeria’s data-centre industry……….

 The regulatory change could create opportunities for Nigeria’s growing data-centre and cloud-services industry.

 If financial institutions are required to keep relevant data within Nigeria, demand for domestic data-centre capacity could rise. That could, in turn, encourage both local and international technology companies to invest in servers, connectivity, cloud platforms and related digital infrastructure.

 For international cloud providers, the choices could become increasingly strategic: build or expand infrastructure in Nigeria, partner with established Nigerian operators, or potentially risk losing some customers that cannot continue to rely on offshore hosting arrangements.

 This is the investment opportunity Coker sees emerging from the CBN directive.

 Rather than viewing localisation solely as an additional compliance burden, he sees it as a potential catalyst for deeper participation by global technology companies in Nigeria’s digital economy.

The road to 2027…..

 The January 1, 2027 deadline gives financial institutions time to examine their existing technology arrangements and develop compliance strategies. But the scale of the transition will depend on how the directive is interpreted and implemented, particularly for institutions whose systems currently span multiple jurisdictions.

 For banks, cloud providers and data-centre operators, the months ahead are therefore likely to be marked by assessments, infrastructure planning and discussions over how data and applications can be moved or hosted domestically without compromising reliability and security.

 The bigger question is whether the policy will produce the investment and infrastructure expansion its proponents anticipate.

 If it does, Nigeria could see data localisation become more than a regulatory requirement. It could become a driver of investment in the country’s digital backbone, bringing more computing capacity, cloud infrastructure and technology partnerships onto Nigerian soil.

 For Coker and others in the domestic data-centre industry, that possibility represents one of the most significant consequences of the CBN’s new direction.

 The policy, in effect, could force a rethink of where Nigeria’s digital economy is physically hosted, and who builds and controls the infrastructure on which it increasingly depends.