President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, replacing the 2007 legislation and significantly expanding the commission’s mandate to manage Nigeria’s digital identity ecosystem.
The new law positions the National Identity Management Commission (NIMC) as the country’s central authority for digital identity, authentication, electronic trust services, and secure digital transactions, marking a major milestone in Nigeria’s digital transformation agenda.
NIMC announced the development in a statement issued on Friday by Kayode Adegoke, its Head of Corporate Communications.
A key provision of the new Act designates NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), giving it responsibility for issuing and managing trusted digital identity services across both the public and private sectors.
The commission said the legislation provides a modern legal framework that aligns Nigeria’s identity management system with global best practices while addressing emerging challenges in cybersecurity, data protection, and digital governance.
According to NIMC, the Act empowers the commission to provide digital identity authentication, electronic trust services, digital certificates, encryption, and secure identity verification for government agencies, financial institutions, businesses, and citizens.
It also authorises the commission to facilitate secure and interoperable data exchange among public and private institutions, creating a stronger foundation for Nigeria’s digital economy.
Describing the legislation as a landmark reform, the commission said it would enhance cybersecurity, strengthen data privacy, promote financial inclusion, and improve public service delivery. “This landmark reform directly advances President Bola Ahmed Tinubu’s Renewed Hope Agenda by accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery, and supporting the development of a secure Digital Public Infrastructure,” NIMC stated.
NIMC noted that the previous legal framework had remained in force for nearly two decades despite rapid changes in digital technology and the increasing importance of secure electronic identity systems.
Under the new law, the National Identification Number (NIN) remains Nigeria’s foundational identity credential, reinforcing the “One Person, One Identity” policy while enabling seamless identity verification across multiple platforms.
The legislation also introduces stronger safeguards for personal data in line with the Nigeria Data Protection Act and international privacy standards.
In addition, it prescribes tougher penalties for multiple registrations, identity theft, impersonation, and other identity-related offences.
The Act formally recognises both physical and digital identity credentials, with all credentials linked to an individual’s National Identification Number.
To improve inclusion, the law also introduces provisions aimed at simplifying enrolment for vulnerable and underserved populations, including people without permanent residences.
NIMC said implementation of the new law is expected to deliver faster and more secure identity verification services for Nigerians at home and abroad.
According to the commission, the legislation will improve interoperability among government agencies and private institutions, strengthen trust in digital transactions, reduce identity fraud, expand financial inclusion, enhance cybersecurity, and improve the ease of doing business.
The commission added that Nigerians should also benefit from more efficient public services as digital identity becomes more widely integrated across sectors.
The amendment of the NIMC Act was one of the key conditions for Nigeria to access full funding under the World Bank’s $430 million Identity for Development (ID4D) programme.
The World Bank had previously acknowledged Nigeria’s progress toward meeting the programme’s final disbursement requirement through the enactment of a more inclusive and modern legal framework for digital identity.
The Bank also revised Nigeria’s enrolment target under the project from 148 million to 180 million National Identification Numbers (NINs), underscoring the strategic role of digital identity in driving financial inclusion, digital services, and economic development.
