Five key things you should know about the NIMC Act 2026

President Bola Ahmed Tinubu recently signed the National Identity Management Commission (NIMC) Act 2026 into law, introducing major reforms aimed at strengthening Nigeria’s digital identity system and expanding access to identity services across the country.

The new legislation replaces the legal framework that has guided the nation’s identity management system for nearly two decades, with the government describing it as a step towards building a modern and secure digital economy.

According to Tinubu, in a statement issued late Friday, the Act establishes a stronger legal foundation for identity management, data protection, digital transactions and inclusion, while also imposing stiffer penalties for identity-related offences.

In this article, Tribune Online takes a look at five key things you should know about the NIMC Act 2026.

NIMC becomes Nigeria’s digital trust authority

One of the major provisions of the Act is the designation of NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure.

The development places the commission at the centre of Nigeria’s digital identity ecosystem, giving it responsibility for securing digital signatures, identity verification processes and electronic transactions across the country.

Stronger protection for personal data

The Act aligns Nigeria’s identity management framework with the Nigerian Data Protection Act and introduces stronger safeguards for citizens’ personal information.

Tinubu stressed the importance of protecting Nigerians’ data, saying: “I will not allow the data of Nigerians to be treated carelessly.”

The law provides that personal information cannot be accessed without consent, used beyond its stated purpose, or obtained outside established legal procedures.

NIN now mandatory for key services

Under the new law, the National Identification Number (NIN) will become a compulsory requirement for a wide range of public and private sector services.

These include passport applications, voter registration, opening bank accounts, land transactions, telecommunications services, pensions, insurance, tax payments, consumer credit facilities and access to government services.

Tinubu emphasised the policy with the declaration: “One person. One identity. One number.”

The legislation also introduces a General Multipurpose Card designed to serve as a single identity credential for verification across different sectors.

Expanded inclusion for vulnerable persons and Nigerians abroad

The Act introduces measures aimed at bringing more Nigerians into the identity system, particularly vulnerable groups and underserved populations.

Among its provisions is the creation of an Identifier system for vulnerable persons, including individuals without permanent residences. The law also mandates initiatives intended to improve social and financial inclusion through trusted digital identity.

For Nigerians living outside the country, the Act provides broader access to identity services and seeks to make enrolment and verification processes more convenient.

Tougher penalties for identity fraud

The NIMC Act 2026 significantly increases sanctions for offences such as impersonation, multiple registration and unauthorised access to identity records.

Tinubu warned offenders against attempting to abuse the system, stating that penalties have been increased substantially under the new law.

Corporate organisations found guilty of violations could face fines of up to ₦20 million, while offenders convicted of unauthorised access, multiple registration or impersonation risk a minimum prison sentence of five years.

The law also grants NIMC court-authorised powers to investigate offences, conduct searches, seize evidence, decrypt data and arrest suspects in identity-related crimes.