Storing payment data on Nigerian servers does give regulators easier access to audit trails, which can help spot fraud and enforce consumer‑protection rules, but it doesn’t automatically make the data more secure—local servers are still vulnerable to ransomware, insider threats, or poorly managed cloud services if the operators don’t follow strong security standards. For smaller fintechs the biggest hurdle will be the capital outlay needed to set up or lease compliant data centres, hire skilled staff, and maintain ongoing compliance, which could push them toward partnerships with larger banks or cloud‑providers that already have the infrastructure. Those bigger players may indeed gain a cost advantage, but the CBN’s phased implementation and the possibility of shared‑infrastructure licences can mitigate a full‑blown squeeze on startups. In terms of speed, latency is likely to improve for domestic transactions because data won’t have to travel overseas, though any added compliance checks could introduce slight delays if systems aren’t optimised. Overall, the directive could boost oversight and local resilience, but its success will depend on how the CBN supports fintechs with clear guidelines, affordable compliance pathways, and incentives for robust cybersecurity practices.