The Central Bank of Nigeria’s (CBN) new data-hosting requirements have opened a major opportunity for Nigeria’s technology industry, but financial institutions must be careful not to allow regulatory pressure to become a blank cheque for infrastructure providers such as MTN.
The directive requires critical local transaction data, payment records, customer financial information and core banking operations to be hosted within Nigeria. Institutions that fail to comply could face regulatory sanctions, penalties and licence-related consequences.
With the January 2027 deadline approaching, banks are under pressure to move quickly. But speed should not come at the expense of proper due diligence.
MTN is among the companies investing heavily in domestic digital infrastructure and is well positioned to benefit from the growing demand for locally hosted financial workloads. However, the regulatory transition should not automatically translate into a market advantage for MTN or any other provider.
The real question for banks is not simply who has the biggest infrastructure or the loudest sales pitch. It is whether a provider can consistently deliver the security, resilience, scalability, performance and disaster-recovery capabilities required to support Nigeria’s most sensitive financial systems.
Banks should therefore resist the temptation to equate local presence with technical superiority.
Moving core banking applications from foreign cloud environments to domestic infrastructure is a complex undertaking. It requires architectural redesign, rigorous security testing, performance validation, redundancy and disaster-recovery planning.
A provider may have data centres on Nigerian soil, but that alone does not guarantee that its infrastructure is suitable for Tier-1 banking workloads.
This is where the industry needs greater scrutiny.
Financial institutions must demand independently verifiable evidence of uptime, cybersecurity controls, disaster-recovery capabilities, capacity, network resilience and compliance before committing critical workloads to any domestic provider.
They must also examine the total cost of ownership. A locally hosted solution should not become unnecessarily expensive simply because banks are operating under a regulatory deadline.
MTN’s scale and investment in Nigeria’s telecommunications and digital infrastructure give it significant commercial advantages. But those advantages should not be confused with an automatic entitlement to dominate the emerging domestic cloud market.
The CBN directive is fundamentally about protecting Nigeria’s financial data, strengthening resilience and ensuring regulatory control over critical systems. It should not become a mechanism through which banks are pushed into a narrow choice of providers without adequate competition and independent assessment.
There is also a danger in concentrating too much critical financial infrastructure in the hands of a small number of dominant technology companies.
If multiple banks migrate essential workloads to the same infrastructure provider, the industry could create a concentration risk that regulators will eventually have to address. A major outage, cyber incident or infrastructure failure affecting a dominant provider could potentially have consequences far beyond a single institution.
Banks therefore need diversification, strong contractual protections, transparent service-level agreements and clearly tested exit strategies.
The January 2027 deadline is real, but compliance should not mean surrendering strategic control.
Banks must conduct their own gap assessments, evaluate multiple providers, run migration pilots and independently test infrastructure before moving mission-critical systems.
MTN may be part of Nigeria’s domestic infrastructure solution, but it should not be treated as the solution.
The race to comply with the CBN directive must ultimately be a race for **security, reliability, value and resilience—not a rush to hand Nigeria’s most sensitive financial infrastructure to whichever provider markets itself most aggressively.**
