Central Bank of Nigeria Mandates Local Storage of Payment Data
The Central Bank of Nigeria (CBN) has issued a directive requiring banks, fintech firms, and other payment service providers to store all payment transaction data generated within the country on local servers, starting January 1, 2027. This regulation signals the end of offshore payment processing in Nigeria.
Significant Regulatory Intervention for Digital Finance
Contained in a recent circular from the Payment Systems Supervisory Authority, this mandate represents a pivotal regulatory development within Nigeria’s digital financial ecosystem. The changes are poised to redefine how financial institutions manage their payments infrastructure, cloud services, and data operations.
Scope of the Directive
The circular, signed by Rakiya Yusuf, head of the Payment Systems Supervision Department, addresses various licensed payment operators including depository banks, microfinance institutions, mobile money operators, exchange companies, and super agents. All entities facilitating payments within Nigeria must comply with the new storage guidelines to align with the country’s data protection laws.
Response to Rapid Growth in Digital Payments
The CBN emphasized that this initiative was driven by the rapid expansion of electronic payments and digital financial services, making Nigeria one of Africa’s largest digital payments markets. While this growth has fostered innovation and increased financial inclusion, it also raises concerns about market concentration and the security of sensitive data stored outside national borders.
Implications for Financial Institutions
As financial institutions adapt to the new requirements, significant implications are anticipated for banks and payment processors that currently rely on foreign cloud solutions or offshore data centers. The policy reflects a broader global trend, where regulators aim for enhanced control over critical financial data due to cybersecurity and national security concerns.
Local Data Center Investments on the Rise
The directive is likely to increase demand for local data center infrastructure and cloud services as institutions gear up for compliance ahead of the 2027 deadline. Recent years have already seen substantial investments in data center capacity in Nigeria, as operators scale their facilities to meet the rising demand from various sectors, including finance and government.
Enhanced Supervision and Market Competition Rules
Beyond data localization, the CBN has implemented additional measures to strengthen oversight of the payments industry. All regulated entities are required to maintain up-to-date records of ultimate beneficiaries and provide this information to the CBN upon request. These disclosure obligations form part of a wider strategy to bolster transparency and enhance regulations surrounding anti-money laundering and counter-terrorism financing.
New Market Share Regulations Introduced
The central bank has also established competition rules to prevent excessive market dominance within the expanding payments sector. For instance, any financial institution controlling over 25% of the card issuance market for 12 consecutive months will not be permitted to dominate the merchant acquisition market beyond a 15% share during the same timeframe. This is aimed at curbing the concentration of power and encouraging a more competitive landscape.
Countdown to Compliance Begins
With the imminent deadline approaching, banks, fintech companies, and payment service providers are now tasked with localizing critical payment data and reassessing their operational strategies in light of these sweeping reforms. As transaction volumes in Nigeria’s digital payments industry continue to surge, the CBN remains committed to upholding a regulatory framework that safeguards the integrity of the financial ecosystem.
