TechnologyHigh
Nigeria's bank data is coming home by January. The full picture of what that means.
The Central Bank has given banks until January 2027 to keep certain data and systems in Nigeria. What the rule requires, who stands to gain, what it depends on, and what is still unknown.
By Betini Udom Published 4 min read Editorial Policy Report a correction

The Central Bank of Nigeria has set January 2027 as the deadline for banks to keep specified data and technology workloads inside Nigeria. As of 21 September, that leaves about 14 weeks. (Derived.)
In that window, banks and fintechs must work out which of their systems the rule covers, where those systems currently run, and how to move or redesign them. Data-centre operators are expanding capacity in anticipation of the demand, according to reporting by BusinessDay, which drew heavily on an interview with Ayotunde Coker, chief executive of Open Access Data Centres (OADC) and a former group chief information officer of Access Bank.
In Simple Terms
Your bank stores and processes your information on computers. Some of those computers are abroad. From January, the CBN wants the sensitive categories on computers in Nigeria.
But not everything. Nigeria's data-classification framework, as Coker described it, sorts data into three groups: data that must be stored and processed locally; data that must be stored locally but may be processed elsewhere under defined conditions; and data that may stay in the global system. So the real task is sorting before moving.
The Money
No one has put a price on this publicly. The reporting contains no estimate of what localisation will cost banks, and no figure from the CBN or any bank.
What is visible is where money is likely to flow. Each workload brought home creates demand for data-centre space, cloud services, network connections, cybersecurity, power and skilled staff. On the supply side, OADC has revised its Lekki campus from a planned 24MW, built in four 6MW phases, to about 40MW, citing artificial intelligence and other dense workloads as well as localisation. That is roughly 16MW more, about two-thirds above the original plan. (Derived.)
Follow the Money
Beyond what the reporting states, this section is Rainingmoney's reading.
Data-centre operators — OADC, Equinix, Digital Realty, Rack Centre and telecoms companies expanding capacity — gain a regulatory reason for banks to rent space from them.
Cloud providers, local ones and global players such as Amazon Web Services, Microsoft, Google and Oracle, may see more infrastructure deployed inside Nigeria. Coker says he has spoken with large banks testing local cloud for core banking.
Power and gas suppliers sit underneath the whole chain. OADC says it is exploring utility and gas-based power for its expansion.
Banks and fintechs carry the cost and the operational risk of redesigning critical systems at speed.
Customers are the unknown. If the bill is large, some of it could eventually surface in charges. Nothing in the reporting confirms that.
The Bigger Picture
The deadline is arriving at the same time as a global surge in demand for computing power driven by AI. That is why a data-centre campus designed for banks' servers is being re-planned for far higher power loads.
The model emerging, as Coker describes it, is not Nigeria against the global cloud but a hybrid: sensitive data and critical processing anchored in Nigeria, with links kept open to international applications, cloud platforms and backup sites where the rules allow. Over the longer term, BusinessDay's reporting frames a bigger ambition: if Nigeria combines reliable power, large data centres and dense connectivity, it could eventually sell computing capacity to the rest of Africa. That is a possibility, not a plan anyone has committed to.
The Jargon
Data localisation — keeping data on servers inside a country's borders.
Core banking — the central system holding customers' accounts and balances.
Workload — any job a computer system runs, from an app to a payment switch.
Co-location — renting space in a shared data centre instead of building your own.
Disaster recovery — backup systems that take over if the main ones fail.
MW (megawatt) — a measure of power. Data centres are sized by how much electricity they can draw.
ISO 27001 and PCI DSS — international standards for information security and for handling card payment data.
What Happens Next
Known. The deadline is January 2027. Banks must map their systems, identify covered data and plan migration. Operators are expanding capacity.
Possible. More banks moving core systems to local cloud. Faster growth in Nigeria's data-centre market. Pressure on the CBN to clarify or extend if banks fall behind.
Unknown. The exact date in January. The full text of the CBN requirement, which the reporting does not quote. The cost to banks. Penalties for missing the deadline. Whether Nigeria's power supply can support the expansion operators are planning.
Rainingmoney's Take
Analysis, not reporting.
This is a genuine turning point, and the infrastructure argument is persuasive: data kept at home creates demand for data centres, which need power, which needs gas, which is something Nigeria has. The chain is real.
But readers should notice whose voice is describing it. Almost everything detailed in this story comes from the chief executive of a company that sells the capacity banks will now need. That doesn't make him wrong, and his advice on resilience — don't depend on a single provider, keep backups and multiple routes — is sound for any bank. It does mean the public has heard the opportunity in detail and the cost not at all. With 14 weeks left, the CBN and the banks themselves are the voices missing from this story.
Sources & Verification
- Based on an interview with Ayotunde Coker, chief executive of Open Access Data Centres.
The Money Print
Market intelligence before the market opens.
Pan-African capital flows and the stories behind the numbers, on weekday mornings.


