CBN warns banks to store payment data in Nigeria by January 2027

The Central Bank of Nigeria (CBN) has told banks and other financial institutions that the deadline for keeping critical payment transaction data inside Nigeria remains 1 January 2027.
What happened
The CBN Deputy Governor for Financial System Stability, Lamido Abubakar Yuguda, gave the warning at a regulatory meeting in Lagos organised with the National Information Technology Development Agency (NITDA), reported on Thursday, 29 October 2026. He said the date had not changed and that institutions that break the rule would face sanctions. Deliberate attempts to frustrate the policy would not be tolerated, he added.
Why the rule exists
The CBN says storing payment data in the country will improve supervision, make the financial system more resilient and protect sensitive customer information, as more Nigerians rely on mobile apps, online banking and fintech services. The meeting focused on the National Sovereign Cloud Initiative, which aims to keep government and critical data on infrastructure within Nigeria.
What banks must do
Yuguda reportedly stressed that simply moving data into the country will not make it safe. Banks must also improve their cybersecurity, plans for keeping services running during outages, disaster recovery and risk management. They will remain responsible for risks linked to cloud providers and other technology partners.
What it means for customers
For ordinary customers, the change should be mostly invisible, but the regulator says it should make it harder for sensitive financial data to be exposed and easier for authorities to investigate fraud.
- The deadline is 1 January 2027 and will not change.
- Banks must also strengthen cybersecurity and backup plans.
- Firms that break the rule face sanctions.



