Tinubu signs NIMC 2026 Act into law, resets Nigeria’s digital identity architecture

…New law positions Commission at centre of Nigeria’s digital economy, cybersecurity and $1tn growth ambition

Abuja: President Bola Ahmed Tinubu has signed the National Identity Management Commission (NIMC) Act, 2026 into law, handing the Commission sweeping new powers to manage Nigeria’s digital identity infrastructure in what officials describe as the most far-reaching reform of the country’s identity management system since NIMC was established almost 2 decades ago.

The legislation repeals the NIMC Act, 2007, replacing it with a modern legal framework that elevates the Commission from a national identity enrolment agency to the country’s central authority for secure digital identity, authentication and electronic trust services.

The reform places NIMC at the heart of Nigeria’s digital transformation agenda by designating it as the Root Certification Authority for the country’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), a role that gives the Commission statutory responsibility for securing digital identities, electronic authentication, encryption, digital certificates and trusted online transactions across government and the private sector.

The move is expected to accelerate the Federal Government’s drive to build a secure digital economy while advancing President Tinubu’s ambition of growing Nigeria into a $1 trillion economy through technology, innovation and improved public service delivery.

According to the Commission, the new law provides the legal foundation for secure and seamless exchange of identity data among Ministries, Departments and Agencies (MDAs), financial institutions, telecommunications companies and other authorised organisations.

It also establishes the institutional framework required to strengthen cybersecurity, improve electronic governance and deepen confidence in Nigeria’s expanding digital economy.

The Commission said the overhaul became necessary because the legal framework enacted in 2007 could no longer adequately support the rapid growth of electronic commerce, digital banking, online government services, data protection requirements and increasingly sophisticated cyber threats.

“The new Act aligns Nigeria’s identity management system with global best practices and emerging technologies while creating a trusted digital identity ecosystem for citizens and businesses,” NIMC said.

A key provision of the legislation strengthens the National Identification Number (NIN) as Nigeria’s primary identity credential under the “One Person, One Identity” policy, making it the foundation for identity verification across public and private institutions.

The Act also introduces stronger safeguards for personal information by aligning identity management with the Nigeria Data Protection Act (NDPA) and internationally recognised privacy standards.

In another major shift, NIMC is empowered to establish and manage Nigeria’s National Public Key Infrastructure, enabling secure digital signatures, encryption technologies, identity authentication and electronic certification that underpin online transactions.

Officials say the development will improve trust in digital payments, financial services, e-commerce, taxation, healthcare, education and other technology-enabled public services.

The legislation formally recognises both physical and digital identity credentials linked to an individual’s National Identification Number, allowing Nigerians to use secure digital identity across multiple platforms.

It also introduces a General Multipurpose Card, designed to support identity verification for a wide range of public and private services under the theme, “One Card, Multiple Possibilities.”

To expand inclusion, the law creates a dedicated identity framework for vulnerable and underserved populations, including individuals without permanent residences, with the aim of ensuring wider access to financial services and government programmes.

The Act further strengthens Nigeria’s fight against identity-related crimes by prescribing stiffer penalties for multiple registrations, identity theft, impersonation and other fraudulent activities.

NIMC said implementation of the law will provide Nigerians with faster identity verification, stronger protection of personal information, improved cybersecurity, wider access to digital services and greater confidence in electronic transactions.

The Commission added that the legislation will also enhance interoperability among government institutions, financial institutions and private organisations, reducing duplication while improving the efficiency of service delivery.

Beyond identity management, analysts believe the reforms could strengthen Nigeria’s investment climate by providing the trusted digital infrastructure required for fintech expansion, electronic commerce, digital lending and cross-sector innovation.

NIMC described President Tinubu’s assent as a defining milestone in Nigeria’s digital transformation, saying the legislation creates the institutional architecture needed to support innovation, economic growth and digital governance.

The Commission also commended the leadership of the National Assembly, the Federal Ministry of Interior, development partners and stakeholders for their contributions to the passage of the legislation.

According to NIMC, implementation guidelines and subsidiary regulations will be issued in the coming months to facilitate a seamless transition to the new legal regime and ensure full implementation of the Act.

With the law now in force, Nigeria has taken a significant step toward building an integrated digital identity ecosystem capable of supporting secure transactions, improving governance, expanding financial inclusion and driving long-term economic development.