From Sector Regulation to Sovereign Cloud: Where Nigeria Is Heading
[This is Part Two of a two-part series on Nigeria’s evolving approach to data localisation. Part One examined the legal foundations of Nigeria’s data localisation framework. This instalment explores the regulatory, policy and infrastructure developments shaping its future direction.]
In Part One of this series, we examined the legal framework underpinning data localisation in Nigeria and explained why the country has adopted a layered approach rather than a single comprehensive data localisation law. However, legislation alone does not tell the full story. Increasingly, sector-specific regulation, government policy and technical standards are shaping Nigeria’s approach to data governance, sovereign cloud infrastructure and digital resilience. It is these developments, and their implications for businesses, that this second instalment explores.
The Expanding Regulatory Landscape
While the NDPA provides the principal framework governing personal data and cross-border transfers, it represents only one component of Nigeria’s broader approach to data localisation.
