Nigeria Tightens Cloud Rules, Targets Bigger Digital Infrastructure Investment

Nigeria is stepping up efforts to build a stronger domestic cloud computing ecosystem as the Federal Government moves to strengthen cloud governance, protect sensitive data and attract fresh investment into digital infrastructure.

The National Information Technology Development Agency (NITDA) has introduced a package of four interconnected frameworks covering cloud computing, technical standards, digital infrastructure assurance and cloud investment.

The initiative is designed to create a more secure and standardised cloud environment while positioning Nigeria as a major digital infrastructure hub in West Africa.

At the centre of the framework is a “Cloud First” approach for government institutions. Under the policy direction, Federal Public Institutions are expected to prioritise cloud-based solutions when deploying new information technology infrastructure, rather than repeatedly investing in standalone on-premise systems.

The framework also places greater emphasis on data classification, security, interoperability and risk management as more government services move to cloud platforms.

Push for local infrastructure

The latest development comes as NITDA intensifies its call for investment in Nigeria’s data-centre and cloud infrastructure.

NITDA Director-General, Kashifu Inuwa Abdullahi, said the country’s expanding digital economy is creating greater demand for computing, storage and connectivity capacity.

He made the call during discussions on converting rising digital demand into data-centre investment, involving major industry players including Digital Realty Nigeria, Equinix, Africa Hyperscalers and Oracle.

The push is particularly significant as demand for cloud computing, artificial intelligence and other data-intensive technologies continues to grow.

What the new framework means

The National Cloud Computing Guideline provides the broader policy direction for cloud adoption, while the National Cloud Technical Guideline establishes technical expectations.

The National Digital Infrastructure Assurance Framework is intended to strengthen certification and assurance around digital infrastructure, while the National Cloud Investment Strategy is focused on attracting investment into the country’s cloud and data-centre market.

The Federal Government’s broader National Digital Cloud Policy has also set an investment target of $750 million over 24 months, with government procurement expected to help create demand for domestic cloud infrastructure.

Data sovereignty takes centre stage

A major objective of the policy is to ensure that sensitive government and regulated data is appropriately protected, including requirements around residency and control of defined categories of data.

However, the Federal Government has clarified that the policy does not impose blanket data-localisation requirements on all commercial data. Instead, sovereignty requirements are targeted at specific categories of government and regulated data where national control is considered necessary.

The move reflects Nigeria’s broader ambition to shift from being primarily a consumer of international cloud infrastructure to becoming a location where cloud infrastructure, computing capacity, skills and digital services can be developed and exported across Africa.

Implementation will determine impact

The policy could create opportunities for data-centre operators, cloud service providers, telecommunications companies, cybersecurity firms and other technology infrastructure businesses.

But analysts have also pointed to the practical challenges ahead, including reliable electricity, fibre connectivity, data-centre capacity, cybersecurity and the availability of specialised technical talent.

The new framework is therefore not simply about regulating cloud services. It represents an attempt to use government technology demand to stimulate investment in the wider digital infrastructure ecosystem.

With Nigeria already experiencing rapidly growing demand for cloud computing and AI infrastructure, the coming months will show whether the new policy can translate into actual data-centre capacity, private-sector investment and greater local control over critical digital infrastructure.