President Bola Tinubu has signed into law the National Identity Management Commission (NIMC) Act, 2026, introducing a new legal framework aimed at strengthening Nigeria’s digital identity ecosystem, enhancing data protection and combating identity-related crimes.
The new legislation repeals and replaces the National Identity Management Commission Act of 2007.
A statement issued by the Presidency described the Act as a landmark reform that would advance Nigeria’s drive towards a secure, inclusive and digitally empowered nation.
Under the new law, NIMC is required to adopt stronger safeguards for the collection, processing, storage and protection of personal data in line with the Nigeria Data Protection Act (NDPA) and international privacy standards.
The Act also designates the commission as Nigeria’s root certification authority for the National Public Key Infrastructure (PKI) and the Digital Public Infrastructure (DPI), making it the country’s trusted authority for secure digital identity, authentication and electronic trust services.
It further empowers the commission to facilitate secure and seamless sharing of identity data among Ministries, Departments and Agencies (MDAs), financial institutions and other authorised organisations through an interoperable digital identity system.
The legislation reinforces the National Identification Number (NIN) as Nigeria’s foundational identity credential under the “One Person, One Identity” policy and recognises both physical and digital identity credentials for authentication and access to public and private sector services.
The Act also introduces a General Multipurpose Card that will enable Nigerians to access multiple government and private services using a single identity credential.
In addition, it provides special identity enrolment measures for vulnerable and underserved groups, including persons without permanent residences, to promote universal access to the national identity system.
To curb identity-related crimes, the law prescribes stiffer penalties for offences such as identity theft, impersonation, unauthorised access to identity data and multiple registrations, with offenders liable to terms of imprisonment and substantial fines.
According to the Presidency, the reforms are expected to improve cybersecurity, deepen financial and digital inclusion, enhance public service delivery, reduce identity fraud and strengthen confidence in digital transactions across the country.
The Federal Government said the new legal framework would also support Nigeria’s digital economy agenda by providing a trusted identity infrastructure for governance, commerce and innovation.
