More than a third of financial organizations polled by Nigeria’s National Information Technology Development Agency (NITDA) expect they will fail to meet the national data residency mandate by the January 1, 2027 cutoff. Out of 44 institutions examined, 15 acknowledged that timely compliance remains improbable, while another three were unable to evaluate their preparedness.
The findings were shared during an Executive Regulatory Dialogue in Lagos, an industry forum organized jointly by NITDA and the Central Bank of Nigeria (CBN) that convened banking executives, fintech founders, tech vendors, and regulatory bodies. Dr. Muhammad Aminu Lawal, digital transformation adviser to NITDA Director-General Kashifu Inuwa Abdullahi, delivered the presentation, clarifying that the numbers reflect voluntary, anonymized self-evaluations rather than official compliance inspections.
The study highlights a distinct divide across the sector: while 59% (26 firms) have either implemented the mandated modifications or project completing them ahead of schedule, exactly half of the 44 surveyed organizations had not yet initiated operational efforts at the time of the poll.
Implementation bottlenecks remain a critical obstacle. Although preliminary planning is widespread—with 70% having categorized their relevant platforms and data, and 52% having charted their existing hosting frameworks—tangible follow-through is lacking. Only 25% have obtained executive board sign-off and funding, 23% have finalized partnerships with domestic service providers, and just 18% have actively started system remediation or migration. Lawal emphasized this gap, noting that while discovery and mapping are largely accomplished, funding allocations, commercial agreements, and technical execution continue to lag behind.
A lack of regulatory clarity is compounding these delays. Roughly 64% of respondents requested a clearer interpretation of “payment transaction data,” while 38% sought clarification regarding what qualifies as being “stored and managed in Nigeria.” As a result, 29 organizations reported being unable to proceed fully without formal guidance, leaving half the cohort operating on speculative assumptions and driving 16% to freeze critical work entirely.
To accelerate progress, the agency’s brief called for explicit written directives defining the mandate’s boundaries, structured transitional milestones, an official exceptions mechanism, and formal guidance on legacy vendor agreements. While approximately six in ten institutions appear positioned to meet the target, significant hurdles remain for the rest.
