President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act, 2026 into law, repealing the 2007 legislation and establishing a comprehensive legal framework designed to strengthen Nigeria’s digital identity ecosystem and accelerate the country’s digital transformation.
The new law significantly expands the mandate of the National Identity Management Commission by designating it as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), positioning the Commission at the centre of the nation’s digital identity, authentication and electronic trust architecture.
The legislation also reinforces the National Identification Number (NIN) as Nigeria’s foundational identity credential under the “One Person, One Identity” policy, while empowering NIMC to facilitate secure and seamless identity verification and data exchange across government institutions, financial organisations and private sector platforms.
The reforms are expected to enhance digital governance, improve public service delivery, strengthen cybersecurity, promote financial inclusion and support the Federal Government’s ambition of building a one-trillion-dollar economy through technology-driven growth.
In a statement issued on Friday, the Commission described the Act as the most significant reform of Nigeria’s identity management framework since NIMC was established nearly two decades ago.
According to the Commission, the rapid expansion of digital services, e-governance, electronic commerce, data protection requirements and evolving cyber threats necessitated a modern legal framework capable of meeting emerging technological realities and aligning Nigeria with international best practices.
Under the new Act, NIMC is mandated to establish and manage the National Public Key Infrastructure and Digital Public Infrastructure, providing trusted authentication systems, digital signatures, digital certificates, encryption services and identity verification mechanisms to enhance confidence in digital transactions and online services.
The legislation also introduces stronger safeguards for personal data and privacy in line with the Nigeria Data Protection Act and internationally recognised standards. It prescribes stiffer penalties for offences including multiple enrolments, identity theft, impersonation and other identity-related crimes.
In a move aimed at promoting inclusiveness, the Act creates an innovative identity framework for vulnerable persons and requires special measures to facilitate the enrolment of underserved populations, including individuals without permanent residences.
The law further recognises both physical and digital identity credentials, all securely linked to an individual’s National Identification Number, thereby expanding opportunities for digital transactions, financial services and public service delivery.
NIMC said implementation of the new framework would deliver faster and more secure identity verification, greater interoperability across public and private sector systems, increased digital and financial inclusion, improved ease of doing business and enhanced confidence in Nigeria’s digital economy.
The Commission commended President Tinubu for what it described as his visionary leadership in signing the legislation, noting that the reform would strengthen the protection of citizens’ personal data, improve cybersecurity, expand access to essential services and provide a solid foundation for sustainable national development.
It also expressed appreciation to the leadership and members of the National Assembly, the Federal Ministry of Interior, development partners and other stakeholders whose contributions facilitated the passage of the legislation.
NIMC said it would issue the necessary regulations and implementation guidelines in the coming months while working closely with government institutions, the private sector and development partners to ensure a seamless transition to the new legal framework.
