Localising Nigeria’s data is easy. Building sovereignty is harder

With Nigeria’s financial sector facing a January 1, 2027, deadline to comply with the Central Bank of Nigeria’s data-localisation rules, the country’s debate over data sovereignty is moving beyond a simple question of where servers are located.

The practical questions are becoming harder: What happens to backups? Who can access the data? Where is it analysed? Can critical systems operate independently of overseas infrastructure? And does Nigeria have enough local capacity to support the transition without raising costs or creating new risks?

Those questions will come into focus on Thursday, September 10, when TechCabal Insights, in partnership with Amazon Web Services (AWS) Partner Network, hosts its Power Brunch, bringing together CEOs, CTOs, regulators, financial services executives, cloud providers, infrastructure companies and other technology leaders to examine what data localisation means in practice.

For Femi Olugbesan, co-founder and chief information officer of Descasio and one of the speakers at the upcoming event, the distinction between localisation and sovereignty is critical.

“Changing the address of the data is not the same as having sovereignty over it,” Olugbesan said.

The CBN’s June 15, 2026, directive requires banks, fintechs, mobile money operators and payment switching networks to keep payment transaction data generated in Nigeria within the country. The requirements extend beyond primary databases to backups, disaster recovery, and logs, while data management must also remain locally governed.

But moving a database from an overseas environment to a Nigerian data centre addresses only one part of the problem.

A bank could host its primary records in Lagos and still send information abroad for analytics, technical support, security monitoring, or backup. The…