CBN’s new mandate: Banks, fintechs race to meet localisation and market cap deadlines

Orisemeke Benjamin

The bustling corridors of Nigeria’s financial technology hubs and commercial banks are currently gripped by an intense wave of compliance activity, according to a new report by professional services firm PwC.

In its report titled: “CBN data localisation and market structure rules: Regulatory, strategic and technology implications for Nigeria’s payment sector”, the professional services firm , noted that following the Central Bank of Nigeria’s (CBN) sweeping regulatory roadmap, financial institutions are scrambling against tight deadlines to overhaul their data architecture and market positioning.

The regulatory directive, designed to curb systemic risk, enhance transparency, and foster a fairer competitive landscape, introduces strict mandates. These include ultimate beneficial ownership (UBO) disclosures, strict market share caps on consumer issuing and merchant acquiring, and a total domestic residency requirement for payment transaction data.

For years, the rapid proliferation of electronic payments has driven unprecedented financial inclusion across Nigeria. However, this exponential growth exposed vulnerabilities, notably heavy operational reliance on offshore cloud storage and high market concentration among a handful of dominant players. The new CBN framework seeks to rebalance the ecosystem, setting a December 31 compliance deadline for market structure rules and a January 1 cutoff for total data localisation.

Industry stakeholders note that the implications stretch far beyond basic administrative adjustments. Institutions heavily reliant on integrated business models must now carefully evaluate their core operations. Under the new rules, any licensed entity controlling more than 25 percent of the market share in consumer issuing cannot hold more than 15 percent in merchant acquiring, and vice versa.

“Meeting the requirements may involve more than changes to regulatory reporting and data storage,” notes the PwC analysis on the CBN directives. “Institutions may need to reconsider where they compete, whether their current business models remain viable, and how their technology environments must change,” the report stated.

For Chief Technology Officers and risk compliance teams, the data residency mandate poses an even steeper hurdle. Payment transaction data generated locally must now be fully stored and managed within the country, challenging prevailing reliance on multi-jurisdictional cloud architectures and foreign servers.

Experts emphasize that the shift will force banks and fintechs to redesign disaster recovery frameworks, analytics systems, and long-term tech investments.

“Data localisation could have implications for cloud infrastructure, disaster recovery, analytics, AI platforms, third-party providers, and long-term technology investments,” PwC explained, noting that restructuring decisions will also trigger complex tax and investment considerations.

Despite the operational friction, financial sector analysts believe the sweeping reforms will ultimately fortify Nigeria’s digital economy.

By demanding transparent ownership structures and localized data sovereignty, the CBN is signaling a mature phase for Nigerian fintech—one where security, resilience, and fair competition take center stage.

As the countdown to the deadlines continues, boards and executive teams across the nation have little time to waste in aligning their strategies with the new regulatory reality.