CBN Mandates Data Localisation — Nigeria's Fintech Sector Faces Six-Month Compliance Clock

Nigeria's Central Bank has issued a binding directive requiring all commercial banks and fintech operators to migrate payment processing data onto domestically hosted servers within six months. The order represents a significant regulatory escalation, forcing institutions that have long relied on offshore cloud infrastructure to restructure data architecture under tight timelines. For Nigeria's fintech ecosystem — one of Africa's largest by transaction volume and venture investment — compliance costs could be substantial, particularly for smaller operators lacking dedicated infrastructure budgets. The directive signals the CBN's intent to assert sovereign control over financial data flows as digital payment volumes accelerate. Internationally headquartered fintechs operating Nigerian licences face the sharpest exposure, potentially triggering renegotiated vendor contracts or capital expenditure spikes. Analysts should watch whether enforcement mechanisms are clearly defined, as ambiguity in implementation timelines has historically weakened similar mandates across emerging markets.