Nigerians are expected to enjoy stronger protection of personal data, faster and more secure identity verification, enhanced cybersecurity, and wider access to digital services following the signing of the National Identity Management Commission, NIMC Act 2026 into law by President Bola Tinubu.
The National Identity Management Commission, NIMC announced that the new legislation, signed by the President, marks a major milestone in Nigeria’s digital transformation journey and provides a modern legal framework for identity management, digital trust, and secure electronic transactions.
The Act repeals and replaces the NIMC Act of 2007, introducing far-reaching reforms designed to align Nigeria’s identity ecosystem with global best practices, emerging technologies, and the realities of a rapidly evolving digital economy.
Under the new law, NIMC is designated as Nigeria’s Root Certification Authority for the National Public Key Infrastructure (PKI) and Digital Public Infrastructure, DPI, making it the country’s trusted authority for secure digital identity, authentication, digital signatures, encryption, and electronic trust services.
According to the Commission, the legislation will enable secure, interoperable, and seamless data exchange among government agencies, financial institutions, and private organisations, laying the foundation for a more efficient digital economy.
NIMC said the reforms are in line with President Tinubu’s Renewed Hope Agenda and are expected to accelerate digital transformation, strengthen national security, deepen financial and social inclusion, improve public service delivery, and support Nigeria’s ambition of becoming a one-trillion-dollar economy.
Explaining the need for the new legislation, the Commission noted that nearly two decades after the original Act was enacted, the digital landscape has changed significantly due to the growth of e-commerce, digital services, e-governance platforms, cybersecurity threats, and increasing data protection requirements.
“The NIMC Act 2026 responds to these realities by modernising Nigeria’s identity management framework, strengthening digital trust, protecting citizens’ personal data, enhancing cybersecurity, and positioning the country to fully harness opportunities in the global digital economy,” the Commission stated.
One of the major provisions of the Act is the strengthening of the National Identification Number (NIN) as Nigeria’s foundational identity credential under the principle of “One Person, One Identity.”
The law also introduces stronger data protection measures aligned with the Nigeria Data Protection Act and international standards, ensuring that personal information is securely processed, stored, and protected.
In addition, the Act formally recognises both physical and digital identity credentials linked to an individual’s NIN, thereby supporting secure online transactions and digital service delivery.
The legislation further introduces a special identity system for vulnerable populations and mandates measures to facilitate the enrolment of underserved groups, including individuals without permanent residences.
To curb identity-related crimes, the law prescribes stricter penalties for multiple registrations and strengthens measures against identity theft, impersonation, and other fraudulent activities.
Another key innovation is the positioning of the NIMC General Multipurpose Card as a versatile identity credential under the theme, “One Card, Multiple Possibilities,” enabling broader use across different services and sectors.
NIMC said Nigerians should expect easier access to identity services, stronger privacy protections, enhanced confidence in digital transactions, improved interoperability across public and private institutions, reduced identity fraud, and more efficient service delivery.
The Commission assured citizens that implementation of the law would be guided by transparency, inclusivity, professionalism, innovation, and citizen-centred service delivery.
It also expressed appreciation to President Tinubu for signing the landmark legislation, describing the Act as the most significant reform of Nigeria’s identity management framework since the establishment of the Commission.
According to NIMC, the law strengthens the legal foundation for Nigeria’s Digital Public Infrastructure, expands access to essential services, improves cybersecurity, and creates a trusted digital identity ecosystem capable of driving innovation, economic growth, and improved governance.
The Commission added that regulations, guidelines, and other subsidiary instruments required for the full implementation of the Act would be issued in due course following consultations with relevant stakeholders.
“With the NIMC Act 2026, Nigeria has taken a major step towards building a secure, trusted, inclusive, and interoperable digital identity ecosystem that will serve as a catalyst for national development and economic transformation,” the Commission stated.
