Nigeria's Digital Postcode System Raises Questions About Data Storage and Control

The National Digital Alphanumeric Postcode System (NDAPS) in Nigeria assigns unique 11-character codes to addressable buildings, making it easier to locate deliveries and services. However, the system’s reliance on Amazon Web Services (AWS) raises questions about data storage and control. The government’s push for greater control over its digital infrastructure is testing its ability to protect a database that pinpoints buildings nationwide. The sovereignty question is further complicated by the fact that the underlying NDAPS database’s location is unclear.

The National Digital Cloud Policy, unveiled in August, sets requirements around the protection, residency, and control of government and regulated data. The Central Bank of Nigeria has also directed financial institutions to store payment transaction data within the country by January 1, 2027. The infrastructure behind NDAPS is worth examining in light of these developments.

The postcode.gov.ng public-facing infrastructure resolves to AWS, a foreign-headquartered cloud provider. This raises concerns about data sovereignty and control, particularly for categories of sensitive or regulated information.