Nigeria’s Digital Economy: How Payment Data Localisation Could Affect Banks, Fintechs and Customers

When people transfer money, pay for goods or receive funds through digital platforms, they depend on systems that must process transactions securely and reliably. Changes to the rules governing how payment data is stored could affect the banks, fintech companies and infrastructure providers responsible for keeping those services running.

That is why discussions about Nigeria’s payment data localisation policy extend beyond financial institutions. They also concern the reliability, security and cost of the digital services used by individuals and businesses every day.

Blessing Ehize, chief technology officer of First City Monument Bank (FCMB), has called for stronger collaboration among banks, fintech companies, regulators and digital infrastructure providers to support Nigeria’s digital transformation.

She made the call during GrowthX by Techeconomy 2026, held on September 24 at The Civic Centre in Victoria Island, Lagos.

According to a report published by Daily Post Nigeria on October 9, Ehize said data localisation should be viewed not only as a regulatory obligation but also as an opportunity to strengthen Nigeria’s digital infrastructure, cybersecurity capabilities and public trust in financial services.

The conference brought together stakeholders from banking, fintech, technology and digital infrastructure to discuss issues including data localisation, digital payments, artificial intelligence and cybersecurity.

The discussions took place amid preparations for a Central Bank of Nigeria requirement concerning the domestic storage of payment transaction data, with a reported implementation deadline of January 1, 2027.

The precise scope of the requirement depends on the applicable regulatory directive. Institutions must establish which data is covered and what technical arrangements satisfy the rules.

For customers, the immediate concern is whether digital financial services will remain secure, accessible and dependable as institutions adapt to the requirements.

Individuals increasingly rely on electronic payments for everyday activities, including paying bills, purchasing goods and sending money to family members. Small businesses also use digital payment services to receive money from customers and manage transactions.

However, the available reporting does not establish that the policy has already caused payment disruptions or increased customer charges. Those outcomes should not be assumed.

The practical impact will depend on how financial institutions implement the requirements, the infrastructure available to them and whether they can maintain reliable services during any necessary changes.

For small businesses, particularly those that depend heavily on electronic payments, service reliability matters because interruptions can delay sales and make it harder to complete transactions.

The policy's effects on customers will therefore depend not simply on where data is stored, but also on how securely and efficiently payment systems operate.

Speaking at GrowthX, Ehize highlighted the infrastructure and skills required to make data localisation effective.

She said: “Data localisation presents both an opportunity and a responsibility for Nigeria’s digital ecosystem.”

She also argued that collaboration among banks, fintech companies, regulators, technology providers and infrastructure operators would be necessary to support secure and reliable digital services.

The broader industry discussion has included questions about implementation timelines, infrastructure readiness, compliance costs and the practical requirements facing financial institutions.

These concerns are important because institutions may need to review their data-storage arrangements, security controls and technology infrastructure to establish compliance.

At the same time, the policy's stated objectives must be considered alongside the operational challenges. Protecting payment information and strengthening domestic capabilities are significant goals, but the rules must also be implemented in ways that preserve the reliability of financial services.

No personal testimony from an affected customer or small-business owner was included in the available report, so the actual experiences of consumers during implementation remain unestablished.

Data localisation concerns where certain information is stored and processed. In financial services, the issue is particularly significant because payment records and associated systems must be protected against unauthorised access, misuse and disruption.

Keeping covered data within Nigeria could support greater domestic oversight and encourage investment in local data centres and related services. However, storage location alone does not guarantee security.

Effective protection also depends on cybersecurity controls, access management, monitoring, disaster recovery and the ability to respond to incidents.

Infrastructure providers consequently have an important role in the transition. Banks and fintech companies need systems that satisfy applicable requirements while maintaining the performance and resilience expected by customers.

For Nigeria's digital economy, the challenge is to strengthen local infrastructure without compromising the accessibility and reliability that make digital payments useful.

The debate is relevant to anyone who depends on electronic payments, from individuals transferring money to businesses receiving customer payments.

It also matters to fintech companies, which must understand how the rules apply to their operations and technology partners.

If implementation requires significant investment, institutions will need to manage those costs alongside their existing operational responsibilities. Whether any additional costs are passed on to customers will depend on individual business decisions and competitive conditions; the available reporting does not establish that this will happen.

Regulators also face the task of providing clear guidance so that financial institutions can understand their obligations and plan their compliance efforts.

For customers, the practical measure of success will be whether their financial information remains protected and their payment services continue to function reliably.

The reported January 1, 2027, deadline makes regulatory clarity and implementation planning important priorities for affected institutions.

Banks, fintech companies and payment service providers will need to assess their arrangements against the applicable CBN requirements and address any identified gaps.

Further clarification of the rules, including the scope of covered data and acceptable infrastructure arrangements, would help institutions plan their investments and compliance work.

The available reporting does not establish that every affected institution has completed this process or that the policy has already produced measurable improvements in customer security.

Nigeria's payment data localisation debate is ultimately about more than the physical location of digital information. It concerns the systems people trust to receive money, pay for goods and conduct business.

As financial institutions prepare for the reported deadline, collaboration between regulators, banks, fintech companies and infrastructure providers will be important in balancing regulatory compliance with secure, dependable digital services.