The National Information Technology Development Agency (NITDA) says only 59 per cent of financial institutions surveyed are expected to meet the January 1, 2027 deadline for local storage of critical financial data, raising concerns about the industry’s readiness to comply with the requirement.
The finding highlights a significant implementation challenge for Nigeria’s financial services sector as institutions work towards aligning their data management infrastructure with the local storage requirement. With the deadline approaching, the level of expected compliance suggests that some organisations may need to accelerate their preparations to avoid falling behind.
The development also brings renewed attention to Nigeria’s efforts to strengthen control over critical digital information, improve data security and expand the country’s digital infrastructure.
January 1, 2027 Deadline Puts Compliance in Focus
The January 1, 2027 deadline represents an important milestone for financial institutions affected by the local storage requirement. As organisations increasingly depend on digital platforms to process transactions, manage customer information and deliver financial services, the location and protection of critical data have become important regulatory and operational considerations.
NITDA’s survey finding that only 59 per cent of the institutions surveyed are expected to meet the deadline suggests that readiness remains uneven across the sector. Although the figure indicates that a proportion of institutions anticipate meeting the requirement, it also raises questions about the preparedness of those that are yet to achieve the necessary level of compliance.
For affected institutions, the remaining preparation period is important. Organisations may need to assess their existing data infrastructure, identify areas requiring adjustment and ensure that their storage arrangements align with applicable requirements.
The transition could also involve reviewing relationships with technology providers, examining data management arrangements and strengthening internal compliance procedures. However, institutions will need to evaluate their individual operational circumstances rather than assume that a single solution will meet every requirement.
Why Local Storage of Financial Data Matters
Local storage of critical financial data is closely connected to the broader concept of data sovereignty, which concerns a country’s ability to exercise control over information generated and processed within its jurisdiction.
Financial institutions manage information that is essential to the operation of the economy. This includes transaction records, customer information and other sensitive data that support financial services. Ensuring appropriate control over such information is therefore important for institutional accountability, security and regulatory oversight.
Keeping critical data within Nigeria, where required, can strengthen the country’s ability to establish and enforce applicable data governance standards. It can also support regulatory access to relevant information and reduce certain dependencies associated with storing critical records entirely outside the country.
Nevertheless, local storage should not be confused with automatic data security. Information remains vulnerable to cyberattacks, unauthorised access, system failures and poor internal controls regardless of where it is hosted.
Consequently, compliance must involve more than selecting a local data centre. Financial institutions also need appropriate cybersecurity measures, access controls, backup arrangements and business continuity plans to protect information and maintain reliable services.
Financial Institutions Face Infrastructure and Operational Challenges
Meeting a local data storage requirement can involve significant technical and organisational adjustments, particularly for institutions whose existing systems depend on international cloud services or data infrastructure located outside Nigeria.
Financial institutions may need to review where different categories of information are stored, how their systems transfer data and whether their technology arrangements meet the applicable regulatory expectations.
They may also need to assess the capacity, reliability and security of available local infrastructure. Data storage systems must support the performance demands of financial services while maintaining adequate protection against operational disruptions.
Cost is another consideration. Depending on their existing arrangements, institutions may face additional expenditure on infrastructure, technology migration, cybersecurity, technical expertise and system maintenance.
Smaller institutions could experience different resource constraints from larger financial organisations, making early planning and clear implementation guidance particularly important.
However, the January 2027 deadline also provides an opportunity for institutions to identify weaknesses in their existing systems and develop more resilient data management arrangements.
Nigeria’s Data Sovereignty and Digital Infrastructure Agenda
The local storage requirement also connects with Nigeria’s wider digital development objectives. As the country’s financial services industry becomes increasingly technology-driven, the ability to manage critical information securely has become an important part of national digital infrastructure planning.
A stronger domestic data infrastructure could support investment in data centres, cloud services, cybersecurity and other technology-related industries. It could also create opportunities for local technology providers to serve financial institutions that require compliant and reliable storage solutions.
Furthermore, increased demand for domestic data infrastructure could encourage improvements in technical capacity and specialised skills. These developments would be relevant not only to financial services but also to other sectors that depend on secure digital information management.
However, the benefits will depend on the availability of reliable infrastructure, consistent power supply, skilled personnel and strong cybersecurity standards. Local storage arrangements must remain competitive in terms of reliability, security and performance if they are to support the needs of a modern financial system.
Compliance Readiness Requires Urgent Attention
With NITDA reporting that only 59 per cent of surveyed financial institutions are expected to meet the deadline, the immediate concern is how institutions that remain unprepared will address their compliance gaps.
A practical starting point is a comprehensive review of existing data arrangements. Institutions need to understand which information falls within the scope of the requirement, where it is currently stored and what changes may be necessary to achieve compliance.
They should also engage relevant technology and infrastructure providers early enough to assess available solutions and avoid last-minute implementation challenges. Internal teams responsible for information technology, risk management, legal compliance and cybersecurity will need to coordinate their efforts throughout the process.
Clear communication between regulators and affected institutions will also matter. Timely clarification of applicable requirements can help organisations make informed technical and financial decisions while reducing uncertainty during implementation.
Importantly, institutions should treat compliance as an ongoing responsibility rather than a one-time exercise tied exclusively to the deadline. Data management systems require continuous monitoring, security updates and periodic reviews to remain effective.
The Road Ahead
The 59 per cent readiness figure provides an indication of the work that remains ahead of Nigeria’s financial institutions as the January 1, 2027 deadline approaches. It also reinforces the importance of early preparation, investment in appropriate infrastructure and effective coordination between institutions and relevant authorities.
For financial institutions, the priority is to establish whether their existing systems meet the applicable requirements and address any outstanding gaps before the deadline. For the wider technology sector, the requirement presents an opportunity to strengthen domestic data infrastructure and expand the capacity of local service providers.
Ultimately, the success of the policy will depend not simply on how many institutions meet the deadline but also on whether the transition produces secure, reliable and sustainable data management practices.
As the deadline draws closer, the gap between the institutions expecting to comply and those still preparing will remain an important measure of the financial sector’s readiness for Nigeria’s evolving digital governance requirements.
