Data sovereignty in Nigeria: fintechs face the challenge of dual regulation

Nigeria is accelerating its transition toward digital sovereignty by requiring banks, fintechs, and payment companies to keep more data within national borders. According to the media outlet TechCabal, the Central Bank of Nigeria (CBN) introduced strict rules on June 15, 2026. These mandate that financial institutions store and manage all payment transaction data generated within the country locally by January 1, 2027.

This initiative was followed two months later by the Nigerian government's introduction of its National Digital Cloud Policy. This broader regulatory framework, overseen by the National Information Technology Development Agency (NITDA), governs cloud adoption, data classification, and cybersecurity. This dual oversight creates a complex regulatory overlap for players in the financial sector.

According to experts interviewed by TechCabal, such as Rahma Ibiyeye of Regcompass Consults, companies must now comply with competing requirements. A bank might use a data center that meets NITDA's technical standards while still needing to prove to the CBN that its financial data is secure and recoverable according to banking rules. The Nigeria Data Protection Commission also adds an extra layer for cross-border transfers.

The implementation of these rules raises major technical questions regarding the definition of primary payment data and the localization of backup systems. To simplify this landscape, artificial intelligence specialist Adeoye Abodunrin suggests that NITDA should lead on infrastructure technology standards, while the CBN should apply these standards to the financial sector by adding its own risk management requirements.

Our perspective

Nigeria's drive to localize its financial data is a strong act of digital sovereignty, essential for protecting African economies from external technological dependence. However, for this transition to truly strengthen the local ecosystem without stifling innovation, institutions must harmonize their rules to offer a clear and competitive framework for the continent's technology champions.